Hi

I forgot to mention: There is a icaltestparser.c in the sources under
which can be used to run the verifier.

On Mon, Apr 17, 2017 at 08:31:19AM +0200, Salvatore Bonaccorso wrote:
> This one was initially reported at [1], then to [2] and got assigned
> the CVE in [3]. There is some unclearness unfortunately around the
> libical CVEs due to reports. To verify this one in the [2] report
> there is a reproducer which can be use to test/verify a potential fix.

Rereading this sentence was slighty confusing I think. What I mean is
that there were several reporter reporting issues in libical at that
time, the respective CVE assignments arise though from 
https://marc.info/?l=oss-security&m=146685931517961&w=2

Regards,
Salvatore

Reply via email to