oss-security - CVE request: latex2man / texlive

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 19 Apr 2012 15:20:40 +0200
From: Matthias Weckbecker <mweckbecker@...e.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: latex2man / texlive

Hi Kurt, Steve, vendors,

recently there has been an issue reported by Helmut Grohne in latex2man. It 
seems to be different from what we had the other day (CVE-2012-2093 [1]).
Bug report of the new issue is available at:

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779

Does this qualify for a CVE? 

Thanks,
Matthias

[1] http://seclists.org/oss-sec/2012/q2/56

-- 
Matthias Weckbecker, Junior Security Engineer, SUSE Security Team
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg, Germany
Tel: +49-911-74053-0;  http://suse.com/
SUSE LINUX Products GmbH, GF: Jeff Hawn, HRB 16746 (AG Nuernberg)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.