oss-security - CVE request: libarchive (pre 3.2.0) denial of service with gzip quine

Message-ID: <20160908074133.GC8525@sin.redhat.com>
Date: Thu, 8 Sep 2016 17:11:34 +0930
From: Doran Moppert <dmoppert@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: libarchive (pre 3.2.0) denial of service with gzip quine

This was fixed in libarchive 3.2.0, but never got a CVE.

Upstream ticket:

https://github.com/libarchive/libarchive/issues/660

Original report:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207362

-- 
Doran Moppert
Red Hat Product Security

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.