oss-sec mailing list archives

Re: CVE request: libsndfile 1.0.25 heap overflow

From: Hanno Böck <hanno () hboeck de>
Date: Tue, 3 Nov 2015 13:47:36 +0100

On Tue, 03 Nov 2015 13:36:45 +0100
Martin Prpic <mprpic () redhat com> wrote:

I also don't see a patch for this issue (or an upstream bug). Any
pointers there would be greatly appreciated. Thanks!


Unrelated, but I recently reported an out of bounds triggered by the
test suite of libsndfile and got no reply:
http://permalink.gmane.org/gmane.comp.audio.libsndfile.devel/681

Seems like a dead / unmaintaned upstream project...

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: BBB51E42

Attachment: _bin
Description: OpenPGP digital signature

Current thread:

CVE request: libsndfile 1.0.25 heap overflow Martin Prpic (Nov 03)
- Re: CVE request: libsndfile 1.0.25 heap overflow Hanno Böck (Nov 03)
  - Re: CVE request: libsndfile 1.0.25 heap overflow cve-assign (Nov 03)
    - Re: Re: CVE request: libsndfile 1.0.25 heap overflow gauri (Nov 05)
- Re: CVE request: libsndfile 1.0.25 heap overflow cve-assign (Nov 03)