Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAA7hUgEX6mxX-4L7i5Qjq=u+b8iPrbSqZmtjXo0X6pG-+TY3hQ@mail.gmail.com>
Date: Tue, 29 Nov 2016 17:22:22 +0100
From: Raphael Geissert <geissert@...ian.org>
To: Open Source Security <oss-security@...ts.openwall.com>
Cc: cve-assign@...re.org
Subject: Re: Re: CVE request: openjpeg: incorrect fix for
 CVE-2013-6045 (was Re: openjpeg CVE-2016-3181, CVE-2016-3182 .. and CVE-2013-6045)

Mitre,

On 6 October 2016 at 03:16, Doran Moppert <dmoppert@...hat.com> wrote:
>> > Do you specifically know of a distribution that still has that patch?
>>
>> Red Hat Enterprise Linux and Ubuntu LTS seem to be still carrying the
>> original patch.  Possibly others, but these are the only ones I've
>> identified.
>
> I should have included this reference:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1382202

It appears that this request fell through the cracks?

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.