full-disclosure - Re: [FD] [oss-security] Multiple crashes in OpenEXR

Open Source and information security mailing list archives

Date: Mon, 22 May 2017 07:54:27 -0500
From: Brandon Perry <bperry.volatile@...il.com>
To: oss-security@...ts.openwall.com
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] [oss-security] Multiple crashes in OpenEXR

> On May 12, 2017, at 1:48 PM, Brandon Perry <bperry.volatile@...il.com> wrote:
> 
> 
>> On May 12, 2017, at 1:45 PM, Henri Salo <henri@...v.fi> wrote:
>> 
>> On Fri, May 12, 2017 at 12:09:30PM -0500, Brandon Perry wrote:
>>> As of this writing, <snip>. No CVEs have been requested.
>> 
>> Why not?
> 
> I’m lazy. I might this weekend.
> 

Attached is the email from MITRE regarding the 7 CVE allocations.

Download attachment "Re_ [scr336814] OpenEXR - 2.2.0.eml" of type "message/rfc822" (27840 bytes)

>> 
>> --
>> Henri Salo
> 

Download attachment "signature.asc" of type "application/pgp-signature" (802 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives