lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 29 May 2018 09:39:58 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: 熊文彬 <bear.xiong@...ppsecurity.com.cn>,
 seclist <fulldisclosure@...lists.org>
Subject: Re: [FD] taglib 1.11.1 vuln

On 05/27/18 07:12 PM, 熊文彬 wrote:
> taglib vulnerability
> ================
> Author : Webin security lab - dbapp security Ltd
> ===============
> 
> 
> Introduction:
> =============
> TagLib Audio Meta-Data Library
> 
> http://taglib.org/

I can't find a matching bug for this in https://github.com/taglib/taglib/issues
- did you actually tell the authors of this software about this bug or just
the rest of the world and not the people who can fix it?

-- 
	-Alan Coopersmith-               alan.coopersmith@...cle.com
	 Oracle Solaris Engineering - https://blogs.oracle.com/alanc

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux - Powered by OpenVZ