Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sat, 4 Feb 2017 21:38:59 -0500
From: <cve-assign@...re.org>
To: <amaris@...hat.com>
CC: <cve-assign@...re.org>, <oss-security@...ts.openwall.com>
Subject: Re: CVE request for two input validation flaws in gtk-vnc

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> [] https://bugzilla.gnome.org/show_bug.cgi?id=778048
> the code does not properly check boundaries of subrectangle-containing tiles

Use CVE-2017-5884.

The scope of this CVE is all of
https://bugzilla.gnome.org/show_bug.cgi?id=778048#c1


> [] https://bugzilla.gnome.org/show_bug.cgi?id=778050
> Integer overflow when processing SetColorMapEntries

Use CVE-2017-5885.

- -- 
CVE Assignment Team
M/S M300, 202 Burlington Road, Bedford, MA 01730 USA
[ A PGP key is available for encrypted communications at
  http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=kVNv
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.