oss-security - CVE request: billion laughs flaw in ptlib

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20130315164238.GO3385@redhat.com>
Date: Fri, 15 Mar 2013 10:42:38 -0600
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: billion laughs flaw in ptlib

Ekiga 4.0.1 was released and noted a security fix in ptlib (seems to be
embedded in Ekiga) for a "billion laughs" style attack.  Could a CVE be
assigned to this?

Thanks.

References:
http://www.ekiga.org/news/2013-02-21/ekiga-4.0.1-stable-available
http://opalvoip.svn.sourceforge.net/viewvc/opalvoip?view=revision&revision=28856
https://bugzilla.redhat.com/show_bug.cgi?id=922177

-- 
Vincent Danen / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.