oss-security - CVE request: clamav 0.94.2

Message-ID: <20081201164608.GA14578@suse.de>
Date: Mon, 1 Dec 2008 17:46:08 +0100
From: Marcus Meissner <meissner@...e.de>
To: oss-security@...ts.openwall.com, coley@...us.mitre.org
Subject: CVE request: clamav 0.94.2

Hi,

the Clamav folks released 0.94.2 and it seems to contain one security
relevant bugfix "recursive stack overflow in jpeg parsing code":

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266

So this probably needs a CVE, Steven?

Ciao, Marcus

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.