(sort of urgent) CVE Request -- cups (repost)

[Jan Lieskovsky <jlieskov () redhat com>]

Hello Steve,

  could you please allocate a new CVE id for the following vulnerability
(we need to have the patch backported till December the 3-rd due some
 internal policies).

cups  -- buffer overflow in the PNG image read
      -- incomplete fix for CVE-2008-1722
(http://www.cups.org/strfiles/2790/str2790.patch)
      -- advisory: http://www.cups.org/str.php?L2974
      -- patch: http://www.cups.org/strfiles/2974/str2974.patch
      -- affects: cups-1.1.17 <= x <= cups-1.3.9
      -- references: http://www.cups.org/str.php?L2974
                     http://svn.easysw.com/public/cups/trunk/CHANGES-1.3.txt (Part "- SECURITY:")

Many thanks!
--
Jan iankko Lieskovsky / Red Hat Security Response Team