oss-sec mailing list archives

Re: Re: Handful of libass issues

From: Salvatore Bonaccorso <carnil () debian org>
Date: Thu, 27 Oct 2016 10:39:01 +0200

Hi,

On Tue, Oct 04, 2016 at 10:23:22PM -0400, cve-assign () mitre org wrote:

The third is a huge memory allocation leading to a crash that wasn't
fixed because a good solution is unavailable at the moment.


Use CVE-2016-7971.


It looks from the discussion in
https://github.com/libass/libass/pull/240 that this issue is disputed
to be actually in libass.

Should the CVE assignment be revisited, possibly rejected, according
the upstream discussion?

Regards,
Salvatore

Current thread:

Handful of libass issues Brandon Perry (Oct 04)
- Re: Handful of libass issues cve-assign (Oct 04)
  - Re: Re: Handful of libass issues Salvatore Bonaccorso (Oct 27)
    - Re: Re: Handful of libass issues Brandon Perry (Oct 27)
    - Re: Re: Handful of libass issues Salvatore Bonaccorso (Oct 31)
    - Re: Handful of libass issues cve-assign (Nov 01)