Format: 1.8
Date: Wed, 07 Jun 2017 15:28:55 -0400
Source: valgrind
Binary: valgrind valgrind-dbg
Architecture: armhf
Version: 1:3.10.1-1ubuntu3~14.5
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos01-arm64-004.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 valgrind   - instrumentation framework for building dynamic analysis tools
 valgrind-dbg - instrumentation framework for building dynamic analysis tools (de
Changes: 
 valgrind (1:3.10.1-1ubuntu3~14.5) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: integer overflow in string_appends
     - debian/patches/CVE-2016-2226.patch: check for overflow in
       coregrind/m_demangle/cplus-dem.c, add xmalloc_failed and xmemdup to
       coregrind/m_demangle/vg_libciface.h.
     - CVE-2016-2226
   * SECURITY UPDATE: use-after-free vulnerabilities
     - debian/patches/CVE-2016-4487_4488.patch: set bsize and ksize in
       coregrind/m_demangle/cplus-dem.c.
     - CVE-2016-4487
     - CVE-2016-4488
   * SECURITY UPDATE: integer overflow in gnu_special
     - debian/patches/CVE-2016-4489.patch: handle case where consume_count
       returns -1 in coregrind/m_demangle/cplus-dem.c.
     - CVE-2016-4489
   * SECURITY UPDATE: integer overflow after sanity checks
     - debian/patches/CVE-2016-4490.patch: parse numbers as integer instead
       of long in coregrind/m_demangle/cp-demangle.c.
     - CVE-2016-4490
   * SECURITY UPDATE: denial of service via infinite recursion
     - debian/patches/CVE-2016-4491.patch: limit recursion in
       coregrind/m_demangle/cp-demangle.c, coregrind/m_demangle/demangle.h.
     - CVE-2016-4491
   * SECURITY UPDATE: buffer overflow in do_type
     - debian/patches/CVE-2016-4492_4493.patch: properly handle large values
       and overflow in coregrind/m_demangle/cplus-dem.c.
     - CVE-2016-4492
     - CVE-2016-4493
   * SECURITY UPDATE: denial of service via infinite recursion
     - debian/patches/CVE-2016-6131.patch: prevent infinite recursion in
       coregrind/m_demangle/cplus-dem.c, add XDUPVEC to
       coregrind/m_demangle/vg_libciface.h.
     - CVE-2016-6131
   * debian/patches/new_kernel.patch: fix building on newer kernels.
Checksums-Sha1: 
 0ab10013e9364f8ecbe7af0a189985f1dcf47539 6644932 valgrind_3.10.1-1ubuntu3~14.5_armhf.deb
 42bb275946570e7e009203ec9dfcf9fcfa025627 39007816 valgrind-dbg_3.10.1-1ubuntu3~14.5_armhf.deb
 d923c489eaff30f78ca7de8eabf58b0c0790f9da 1226 valgrind-dbgsym_3.10.1-1ubuntu3~14.5_armhf.ddeb
Checksums-Sha256: 
 d3ce334e4bfce1884a635406a86050d4bc9c10e288dbb2c14fca3454d15079ea 6644932 valgrind_3.10.1-1ubuntu3~14.5_armhf.deb
 197fc8ff15509bb1d3e985ab9f3f73c1e8b82be6ecdd153c604b8f105f2a8317 39007816 valgrind-dbg_3.10.1-1ubuntu3~14.5_armhf.deb
 76e5944824b2e8c845dfcb6405571bc7d8a5851a4e3afd24016f47437d35aff0 1226 valgrind-dbgsym_3.10.1-1ubuntu3~14.5_armhf.ddeb
Files: 
 9ab66829587cf01e65f3495256387533 6644932 devel optional valgrind_3.10.1-1ubuntu3~14.5_armhf.deb
 0a6f6c27709f6a3b98137a01dacf2fc5 39007816 debug extra valgrind-dbg_3.10.1-1ubuntu3~14.5_armhf.deb
 6ba6f42cba7939ce8c2356c15cf3c2e2 1226 devel extra valgrind-dbgsym_3.10.1-1ubuntu3~14.5_armhf.ddeb
Original-Maintainer: Alessandro Ghedini <ghedo@debian.org>