Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 09 Oct 2012 22:53:41 -0600
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: Jérôme Benoit <jerome.benoit@...nouille.com>,
        henri@...v.fi
Subject: Re: CVE Request -- claws-mail -- NULL pointer derefence
 while processing email content.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/09/2012 01:29 PM, Jérôme Benoit wrote:
> Hello,
> 
> A NULL pointer dereference flaw was found in the format agnostic 
> email content processing code in claws-mail, an email client (or 
> MUA) based on GTK+.
> 
> References:
> 
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=862578 [2] 
> http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2743
> 
> 
> Could you allocate a CVE id for this?
> 
> Cheers.

Just a note, patch is:
www.thewildbeast.co.uk/claws-mail/bugzilla/attachment.cgi?id=1165

Please use CVE-2012-4507 for this issue.



- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
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=HeLF
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.