oss-security - CVE requests: drupal and phpbb

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Thu, 10 Apr 2008 21:09:42 +0200
From: Hanno Böck <hanno@...eck.de>
To: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE requests: drupal and phpbb

phpbb:
Release notes of 3.0.1 mention
"We are very pleased to announce the availability of the phpBB 3.0.1 package. 
This version has seen numerous stability fixes, performance tweaks and 
general bugs fixed. Additionally two minor security-related bugs were fixs."
I couldn't find pointers to the security bugs.

drupal:
http://drupal.org/node/244637
(Drupal SA-2008-026)

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.