On Mon, Aug 22, 2016 at 12:29:43AM +0200, Petter Reinholdtsen wrote: > Reading the upstream bug report, there seem to be no solution in sight > any time soon. Perhaps it would be better if mat simply reported a > failure and refused to process the input if it find embedded parts it > can't strip? It would be better than pretending to succeed.
I agree. > Did you ever get a CVE for this issue? I did not find one when I followed > the mailing list thread, but might have missed it. no. -- cheers, Holger
signature.asc
Description: Digital signature