oss-sec mailing list archives
RE: CVE Request: Multiple security issues in OpenJPEG
From: winsonliu(刘科) <winsonliu () tencent com>
Date: Wed, 30 Aug 2017 02:48:24 +0000
Hello, I've already submitted these issues to https://cveform.mitre.org/ . As expected, four CVE numbers will be assigned since some of them have the same root cause. Regards, Ke -----Original Message----- From: winsonliu Sent: 2017年8月25日 20:16 To: 'Vladis Dronov' <vdronov () redhat com>; 'oss-security () lists openwall com' <oss-security () lists openwall com>; 'Alan Coopersmith' <alan.coopersmith () oracle com> Cc: 'cve-assign' <cve-assign () mitre org> Subject: RE: [oss-security] CVE Request: Multiple security issues in OpenJPEG Hello, I'll submit them to cveform next week. And I'll update this thread when more information is available. Regards, Ke -----Original Message----- From: winsonliu Sent: 2017年8月24日 9:26 To: 'Vladis Dronov' <vdronov () redhat com>; oss-security () lists openwall com; 'Alan Coopersmith' <alan.coopersmith () oracle com> Cc: cve-assign <cve-assign () mitre org> Subject: RE: [oss-security] CVE Request: Multiple security issues in OpenJPEG I'm afraid no CVEs were assigned. At least I did not submit these issues to https://cveform.mitre.org/ Regards, Ke -----Original Message----- From: Vladis Dronov [mailto:vdronov () redhat com] Sent: 2017年8月23日 19:53 To: oss-security () lists openwall com Cc: winsonliu <winsonliu () tencent com>; cve-assign <cve-assign () mitre org> Subject: Re: [oss-security] CVE Request: Multiple security issues inOpenJPEG(Internet mail)
Most of these seem to be fixed now in OpenJPEG's recent 2.2.0 release. Did CVE id's ever get assigned for them?
If no one reported them and requested CVE-ids via https://cveform.mitre.org/ then I suppose not, no CVE-ids were assigned. Best regards, Vladis Dronov | Red Hat, Inc. | Product Security Engineer
Current thread:
- Re: CVE Request: Multiple security issues in OpenJPEG Alan Coopersmith (Aug 22)
- Re: CVE Request: Multiple security issues in OpenJPEG Vladis Dronov (Aug 23)
- <Possible follow-ups>
- RE: CVE Request: Multiple security issues in OpenJPEG 刘科 (Aug 25)
- RE: CVE Request: Multiple security issues in OpenJPEG 刘科 (Aug 29)