Home page logo

oss-sec logo oss-sec mailing list archives

Re: LZW decompression issues
From: Tavis Ormandy <taviso () cmpxchg8b com>
Date: Thu, 29 Sep 2011 17:51:00 +0200

On Thu, Sep 29, 2011 at 02:50:22PM +0200, Joerg Sonnenberger wrote:
On Thu, Sep 29, 2011 at 04:38:08AM +0400, Solar Designer wrote:
Hi Tavis,

On Wed, Sep 28, 2011 at 08:42:56PM +0200, Tavis Ormandy wrote:
I believe I wrote that patch,

I believe you wrote a different patch, or two:


This is not about GNU (g)zip, but the NetBSD/FreeBSD tool of the same
name. The corresponding NetBSD advisory explicitly lists GNU gzip and
libarchive as not vulnerable.


I see, apologies for misunderstanding.


taviso () cmpxchg8b com | pgp encrypted mail preferred

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]