oss-security - Re: CVE Request: gd buffer read overflow in gd_gif

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20150323175243.GA29599@inutil.org>
Date: Mon, 23 Mar 2015 18:52:43 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org, security@....net, kaplanlior@...il.com
Subject: Re: CVE Request: gd buffer read overflow in
 gd_gif_in.c

On Mon, Mar 23, 2015 at 10:59:23AM -0400, Francisco Alonso wrote:
> Hi,
> 
> Could a CVE be please assigned to the following issue? (in case it was
> not requested to MITRE before):
> 
> gd: buffer read overflow in gd_gif_in.c
> https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43
> https://bugs.php.net/bug.php?id=68601
> https://bugzilla.redhat.com/show_bug.cgi?id=1188639

Adding security@....net to CC.

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.