oss-sec mailing list archives

Re: CVE Request: libtiff: heap buffer overflow/read outside of array

From: Ian Zimmerman <itz () primate net>
Date: Wed, 9 Nov 2016 18:01:51 -0800

On 2016-11-09 17:32, Brian 'geeknik' Carpenter wrote:

http://bugzilla.maptools.org/show_bug.cgi?id=2587
Fixed per

2016-11-10 Even Rouault <even.rouault at spatialys.com>


I tried to check out the sources to patch this for myself, following the
recipe from the webpage:

 [2+0]Downloads$ export CVSROOT=:pserver:anonymous () remotesensing org:/cvsroot
 [3+0]Downloads$ cvs login
Logging in to :pserver:anonymous () remotesensing org:2401/cvsroot
CVS password: # use password "anonymous" 
cvs [login aborted]: connect to remotesensing.org(23.236.62.147):
2401 failed: Connection timed out

Is there another/better way?

-- 
Please *no* private Cc: on mailing lists and newsgroups
Personal signed mail: please _encrypt_ and sign
Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html

Current thread:

CVE Request: libtiff: heap buffer overflow/read outside of array Brian 'geeknik' Carpenter (Nov 09)
- Re: CVE Request: libtiff: heap buffer overflow/read outside of array Ian Zimmerman (Nov 09)
  - Re: Re: CVE Request: libtiff: heap buffer overflow/read outside of array Bob Friesenhahn (Nov 09)
- Re: CVE Request: libtiff: heap buffer overflow/read outside of array cve-assign (Nov 11)