oss-security - Fastbin double free issue in MP4v2 2.0.0

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1547026997083.50320@kpit.com>
Date: Wed, 9 Jan 2019 09:43:17 +0000
From: Purushottam Choudhary <Purushottam.Choudhary@...t.com>
To: "oss-security-help@...ts.openwall.com"
	<oss-security-help@...ts.openwall.com>, "oss-security@...ts.openwall.com"
	<oss-security@...ts.openwall.com>, "kidjan@...il.com" <kidjan@...il.com>
Subject: Fastbin double free issue in MP4v2 2.0.0 

Hi,

As per below link Fastbin double free in MP4v2 2.0.0 related issue was reported in opensource community :
https://bugzilla.redhat.com/show_bug.cgi?id=1603294

Issue description : libmp4v2: Double free in the MP4StringProperty class in mp4property.cpp
CVE Number : CVE-2018-14054
CVE status : Not Available

Currently there is no patch is available in the upstream .
Is there any plan for release of the patch or is there any other link in where I can find the patch?

Please let me know.

Thanks & Regards,
Purushottam
This message contains information that may be privileged or confidential and is the property of the KPIT Technologies Ltd. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. KPIT Technologies Ltd. does not accept any liability for virus infected mails.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.