oss-security - CVE request: mantis before 1.2.12

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 13 Nov 2012 14:52:27 +0000
From: Hanno BÃ¶ck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: mantis before 1.2.12

http://www.mantisbt.org/bugs/changelog_page.php?version_id=150

New mantis bugtracker release. Two fixes are security relevant
(althouhg both sound minor)


- 0014496: [security] Workflow Transitions: Minimal Access Level to
  Change to this status has no correct 'default' (dregad) - resolved.
http://www.mantisbt.org/bugs/view.php?id=14496


- 0014704: [security] Clone and Move issue with Copy bug notes - user
  get email notice from project without access (dregad) - closed.
http://www.mantisbt.org/bugs/view.php?id=14704


Please assign CVEs.

-- 
Hanno Böck		mail/jabber: hanno@...eck.de
GPG: BBB51E42		http://www.hboeck.de/

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.