oss-security - CVE Request -- libmodplug

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1240318027.3191.7.camel@dhcp-lab-164.englab.brq.redhat.com>
Date: Tue, 21 Apr 2009 14:47:07 +0200
From: Jan Lieskovsky <jlieskov@...hat.com>
To: "Steven M. Christey" <coley@...us.mitre.org>
Cc: oss-security <oss-security@...ts.openwall.com>
Subject: CVE Request -- libmodplug

Hello Steve,

  could you please allocate a new CVE-2008-XXXX identifier for
the following old libmodplug issue:

References:
http://bugs.gentoo.org/show_bug.cgi?id=266913
http://www.securityfocus.com/bid/30801/info
http://sourceforge.net/project/shownotes.php?release_id=677065&amp;group_id=1275
https://bugzilla.redhat.com/show_bug.cgi?id=496834

Affected libmodplug versions: x < 0.8.6

Patch (against modplug-xmms/libmodplug):
http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&amp;r2=1.2

Thanks, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.