[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201403191311.s2JDBIFX007974@linus.mitre.org>
Date: Wed, 19 Mar 2014 09:11:18 -0400 (EDT)
From: cve-assign@...re.org
To: jmm@...ian.org
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request for python/zipfile
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> http://bugs.python.org/issue20078
> http://hg.python.org/cpython/rev/79ea4ce431b1
> ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary edited zips
Use CVE-2013-7338.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJTKZXkAAoJEKllVAevmvmsm7EH/1zQjNZMlRVV0ixiDnTwQiNe
ih1Bwbo+rogCr28RdTuJQm4EsX4yGlnqwjv4SaQCvOWEE3m+bmTPvnrFlWcYZzr3
Xqns2eyZPAygcqf0fPujC2QslesIeTSOUDOU0QCnNi7njh5g+daORhPVBQLka4Ac
jrbfwfypx0EmVImJua5oAyg9hYmky0w28vIJFF3Xb39kRaxUUKv9qd/dagRWthJr
XpRrD82pTHT0fiil4eKO0f4Sz2RXxNIyKhndyNXc2vT1NTVvJJip6H9FhlXDOqvd
hB+TDTMQtuM72Vvsy5CQWLw45fBhwdzHVQAGxN0l5rxjRg8/PpDJXKs+EkJbKzU=
=grR3
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
