oss-security - Drupal CORE and Drupal Contrib

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri, 16 Mar 2012 11:51:10 -0600
From: Kurt Seifried <kseifried@...hat.com>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>,
        security@...pal.org
Subject: Drupal CORE and Drupal Contrib

I was going to ask this next week but now seems topical: looking at
http://drupal.org/security/contrib

I see drupal core (at least one thing there needs a CVE), and no CVE's
listed on that page. Would it be possible to get Drupal to list CVE's
assigned for the issue on that page? It would make life easier for all
concerned.

Ditto for the contrib page, 41 issues so far this year, I think a bunch
have CVE's assigned but am not sure. Would it be possible to get Drupal
to list CVE's assigned for the issue on that page? It would make life
easier for all concerned.

I was planning to do a missing CVE assignment for Drupal this weekend
(I'm guessing 40?).

-- 
Kurt Seifried Red Hat Security Response Team (SRT)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.