oss-sec mailing list archives

CVE request: lcms 1.x buffer overflows

From: "Thijs Kinkhorst" <thijs () debian org>
Date: Mon, 5 Aug 2013 07:25:29 +0200

Hi,

Buffer overflows have been reported in Little CMS 1.x:
http://bugs.debian.org/718682

Upstream does not support this branch anymore since 2009, but several
distributions are still shipping it.

Can a CVE id be assigned please?


Thanks,
Thijs

Current thread:

CVE request: lcms 1.x buffer overflows Thijs Kinkhorst (Aug 04)
- Re: CVE request: lcms 1.x buffer overflows Raphael Geissert (Aug 05)
  - Re: CVE request: lcms 1.x buffer overflows Kurt Seifried (Aug 21)
    - Re: CVE request: lcms 1.x buffer overflows Thijs Kinkhorst (Aug 21)
    - Re: CVE request: lcms 1.x buffer overflows Kurt Seifried (Aug 21)