lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Mon, 22 May 2017 07:54:27 -0500
From: Brandon Perry <bperry.volatile@...il.com>
To: oss-security@...ts.openwall.com
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] [oss-security] Multiple crashes in OpenEXR


> On May 12, 2017, at 1:48 PM, Brandon Perry <bperry.volatile@...il.com> wrote:
> 
> 
>> On May 12, 2017, at 1:45 PM, Henri Salo <henri@...v.fi> wrote:
>> 
>> On Fri, May 12, 2017 at 12:09:30PM -0500, Brandon Perry wrote:
>>> As of this writing, <snip>. No CVEs have been requested.
>> 
>> Why not?
> 
> I’m lazy. I might this weekend.
> 

Attached is the email from MITRE regarding the 7 CVE allocations.



Download attachment "Re_ [scr336814] OpenEXR - 2.2.0.eml" of type "message/rfc822" (27840 bytes)


>> 
>> --
>> Henri Salo
> 



Download attachment "signature.asc" of type "application/pgp-signature" (802 bytes)


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists