full-disclosure

Open Source and information security mailing list archives

Message-ID: <3bcd1bcb-5316-9dae-43c2-e76e989a8ef3@oracle.com>
Date: Tue, 29 May 2018 09:39:58 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: 熊文彬 <bear.xiong@...ppsecurity.com.cn>,
 seclist <fulldisclosure@...lists.org>
Subject: Re: [FD] taglib 1.11.1 vuln

On 05/27/18 07:12 PM, 熊文彬 wrote:
> taglib vulnerability
> ================
> Author : Webin security lab - dbapp security Ltd
> ===============
> 
> 
> Introduction:
> =============
> TagLib Audio Meta-Data Library
> 
> http://taglib.org/

I can't find a matching bug for this in https://github.com/taglib/taglib/issues
- did you actually tell the authors of this software about this bug or just
the rest of the world and not the people who can fix it?

-- 
	-Alan Coopersmith-               alan.coopersmith@...cle.com
	 Oracle Solaris Engineering - https://blogs.oracle.com/alanc

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives