oss-security - CVE Request(s): libgcrypt

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <54A1B7CE.7040706@internot.info>
Date: Tue, 30 Dec 2014 07:21:34 +1100
From: Joshua Rogers <honey@...ernot.info>
To: oss-security@...ts.openwall.com
Subject: CVE Request(s): libgcrypt

Hi,

I found multiple vulnerabilities in libgcrypt. Could I get some CVE-ID's
for them?

--
Double free of 'hd':
http://lists.gnupg.org/pipermail/gcrypt-devel/2014-December/003300.html

off-by-one out-of-bounds read:
http://lists.gnupg.org/pipermail/gcrypt-devel/2014-December/003299.html
--


Thanks,
-- 
-- Joshua Rogers <https://internot.info/>


Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.