Re: pspp - cve-2017-10791 - cve-2017-10792

[John Darrington <john@darrington.wattle.id.au>]

I suspect this report is mistaken.  But this bit is Ben's code, so I'll let him comment on
that.

J'

On Mon, Jul 03, 2017 at 07:22:57AM +0200, Friedrich Beckmann wrote:
     Dear owl337 team,
     
     thanks for looking at pspp and finding the security problems
     
     https://security-tracker.debian.org/tracker/CVE-2017-10791
     
     and
     
     https://security-tracker.debian.org/tracker/CVE-2017-10792
     
     in pspp! Your reports are quite detailed. Could you describe how you found the problems, i.e. do
     you have some information about collAFL?
     
     Regards
     
     Friedrich
     
     
     
     _______________________________________________
     pspp-dev mailing list
     pspp-dev@gnu.org
     https://lists.gnu.org/mailman/listinfo/pspp-dev

-- 
Avoid eavesdropping.  Send strong encrypted email.
PGP Public key ID: 1024D/2DE827B3 
fingerprint = 8797 A26D 0854 2EAB 0285  A290 8A67 719C 2DE8 27B3
See http://sks-keyservers.net or any PGP keyserver for public key.

Attachment: signature.asc
Description: Digital signature