Re: CVE request: out-of-bounds memory access flaw in unrtf

["Vincent Danen" <vdanen () redhat com>]

On 12/03/2014, at 9:57 AM, Michal Zalewski wrote:

> > > https://bugzilla.redhat.com/show_bug.cgi?id=1170233>
> > You mixed up Michal and me :-)
>
> Possibly in reference to:
> https://lists.gnu.org/archive/html/bug-unrtf/2014-11/msg00001.html

Wow, I was more tired than I thought.  I did take the wrong reference 
and was indeed referring to Michal's mail.

I've updated our bug to to note both even though it may require more 
than one CVE.  It seems like quite the mess for an unmaintained package.

Thanks for pointing the errors out.


--
Vincent Danen / Red Hat Product Security