http://bugzilla.suse.com/show_bug.cgi?id=1052454
http://bugzilla.suse.com/show_bug.cgi?id=1052454#c3
--- Comment #3 from Karol Babioch ---
Yes, please do not close security-related bugs for yourself, but assign them
back to us (security-team@), so we can have another look at it. We will close
the bug once all necessary updates have been released.
It seems that this issue has been solved with pull request #9376
(https://github.com/opencv/opencv/pull/9376), the same as for CVE-2017-12604
(issue #9309). Unfortunately a lot of code has been re-factored with this
request, so it is not apparent (by a quick look) what the actual fix is. More
unfortunate is, that there are not a lot of details about the CVEs either, but
given that the one is a "double free" and the other one is a "out of bounds
write", they are no duplicates.
--
You are receiving this mail because:
You are on the CC list for the bug.
