Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 19 Jan 2012 12:59:29 +0200
From: Henri Salo <>
Subject: Re: CVE request - Batavi 1.2.1 Fixes Blind SQL
 Injection vulnerability in boxToReload parameter of ajax.php

On Thu, Jan 19, 2012 at 08:40:47AM +0100, Ronald van den Blink wrote:
> On Jan 18, 2012, at 10:55 PM, Kurt Seifried wrote:
> > Can you include a link to the code commit(s) that fiix this? Thanks.
> Hi Kurt,
> This is still a bit of a problem, as our internal svn is still not correctly set up to sync to SF's SVN. What I can do however is ask our developers to create a diff of the files which were changed to fix this and post them online?
> B.t.w. if someone knows a way to sync two SVN repositories to with each other, please contact me off list.
> With kind regards,
> Ronald

I am contacting you in the list, because someone might end up here using keywords:

- Henri Salo

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.