Date: Thu, 1 Jun 2017 00:24:10 +0200 From: Andreas Stieger <astieger@...e.com> To: oss-security@...ts.openwall.com Subject: Re: Information on recent sqlite3 issues? Hello, On 05/31/2017 10:30 PM, Moritz Muehlenhoff wrote: > one of the latest Apple advisories mentions several vulnerabilities in sqlite: > https://support.apple.com/en-us/HT207798 > > CVE-2017-2513: found by OSS-Fuzz > CVE-2017-2518: found by OSS-Fuzz > CVE-2017-2520: found by OSS-Fuzz > CVE-2017-2519: found by OSS-Fuzz > CVE-2017-6983: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative > CVE-2017-6991: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative > > Does anyone have additional information on those and whether that > applies to the standard sqlite releases or Apple-specific changes? SUSE has asked Apple, but has not yet received an answer as far as I am aware. Andreas -- Andreas Stieger <astieger@...e.com> Project Manager Security SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.