oss-security - Re: CVE Request - OpenJPEG: Security Fixes

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160512073520.GA9651@inutil.org>
Date: Thu, 12 May 2016 09:35:20 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Cc: cve-assign <cve-assign@...re.org>
Subject: Re: CVE Request - OpenJPEG: Security Fixes

On Thu, May 12, 2016 at 06:45:37AM +0000, winsonliu(刘科) wrote:
> Hi,
> 
> Some security issues of OpenJPEG have been fixed. Please consider assigning CVE numbers to them.
> 
> 2. Issue 775
> OpenJPEG Out-of-Bounds Access in function opj_tgt_reset of tgt.c
> Fixed via https://github.com/uclouvain/openjpeg/commit/1a8318f6c24623189ecb65e049267c6f2e005c0e

Is that a different issue than CVE-2016-1924?

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.