[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20110627224349.GH1944@redhat.com>
Date: Mon, 27 Jun 2011 16:43:49 -0600
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request for libpng regression (CVE-2004-0421)
It looks like CVE-2004-0421 was regressed upstream a few years ago and
was not noticed.
References:
http://sourceforge.net/mailarchive/forum.php?thread_name=BANLkTikrnU6FJNQYFvwmt78hwpgKPVRd1Q%40mail.gmail.com&forum_name=png-mng-implement
https://bugzilla.redhat.com/show_bug.cgi?id=717084
http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commitdiff;h=65e6d5a34f49acdb362a0625a706c6b914e670af
Could a CVE name be supplied? I don't know if upstream has requested
one independently or not.
--
Vincent Danen / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
