oss-security - CVE request: lcms 1.x buffer overflows

Date: Mon, 5 Aug 2013 07:25:29 +0200
From: "Thijs Kinkhorst" <thijs@...ian.org>
To: oss-security@...ts.openwall.com
Subject: CVE request: lcms 1.x buffer overflows

Hi,

Buffer overflows have been reported in Little CMS 1.x:
http://bugs.debian.org/718682

Upstream does not support this branch anymore since 2009, but several
distributions are still shipping it.

Can a CVE id be assigned please?

Thanks,
Thijs

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.