Displaying 3 results from an estimated 3 matches for "dupiic".
Did you mean:
dpic
2020 Jul 07
2
new 1.3.7 and fix for CVE-2018-10392 (issue 2335)?
...om<mailto:ellenj at mathworks.com>>; vorbis-dev at xiph.org<mailto:vorbis-dev at xiph.org>
Subject: Re: [Vorbis-dev] can we help with libvorbis release for CVE fixes?
Ok,
I wasn't able to track down the original steps to reproduce this
issue,s but we believe CVE-2018-10393 is a dupiicate of CVE-2017-14160,
both fixed by commit 018ca26dece6.
Because of the confusion, I added additional bounds checks to
the bark_noise_hybridmp function, which make it clear to local analysis
that no for bugs in this class are possible. This change is in
commit a9eb99a5bd6f.
Both of these changes...
2020 Jul 04
0
can we help with libvorbis release for CVE fixes?
Ok,
I wasn't able to track down the original steps to reproduce this
issue,s but we believe CVE-2018-10393 is a dupiicate of CVE-2017-14160,
both fixed by commit 018ca26dece6.
Because of the confusion, I added additional bounds checks to
the bark_noise_hybridmp function, which make it clear to local analysis
that no for bugs in this class are possible. This change is in
commit a9eb99a5bd6f.
Both of these changes...
2020 Jun 12
4
can we help with libvorbis release for CVE fixes?
Hi Ralph,
Thank you for your reply!
For context -- we consider reported CVEs as bugs even if it's in a third-party library we use (such as libvorbis). We first determine if the CVE is something that would impact our customer workflows. In this case because of our use of libvorbis for audio I/O, it does impact our customers so we need to resolve the CVE as soon as possible.
In the