[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <20141031061424.7ACF642E031@smtpvbsrv1.mitre.org>
Date: Fri, 31 Oct 2014 02:14:24 -0400 (EDT)
From: cve-assign@...re.org
To: roucaries.bastien@...il.com, hanno@...eck.de
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: Request cve for imagemagick security problem
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Removing profile from jpg image create infinite loop with at least
> 6.8.9.6 version.
> More information https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764872
> and fix is
> http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26399#p116146
Use CVE-2014-8561.
> Out-of-bound memory error in DCM decode has no CVE yet (if CVE
> assigners read this they may assign one).
Use CVE-2014-8562.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJUUygXAAoJEKllVAevmvmsQAgIALg2fB1M8QuGDrhzs0NRcc/v
5EqEX0SGyXi6TFyd/bAG8O4c6sp0SIPgd7RWZ00XKpS26NzubmFwGUgL2TQPNxvn
7BEIKzg8ZcMOQdXXddXFvCua+52YbysQteIqAsDTCESmZXshBPpDpdxfbMozpd9m
LGCIDv1ATF/8LE9R/zBSjmpnLk+Trp8RQwQTTsh0YRumGUCmW03MnCBFe9J+2gnj
8UecMPoj/IkBFL2GbUeM51d/Lk8cR4WeCGLtxCPZ//gIGOZHnQIF6L+oKg+5SgwD
Pnr9oIaA/vEM0BEtQrISrektYqXHyc+DjuqsCoUiSU8HmAM07eLcgGqQnucC3hc=
=xQpo
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
