Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 15 Jun 2012 09:19:14 +0300
From: Henri Salo <henri@...v.fi>
To: oss-security@...ts.openwall.com
Cc: Greg Knaddison <greg.knaddison@...uia.com>,
	Kurt Seifried <kseifried@...hat.com>
Subject: Re: CVE Request for Drupal contributed modules

On Wed, Jun 13, 2012 at 08:32:11PM -0600, Kurt Seifried wrote:
> CVE-2012-2699 SA-CONTRIB-2012-073 - Glossary - Cross-Site Scripting (XSS)
> CVE-2012-2700 SA-CONTRIB-2012-074 - Contact Forms - Access Bypass
> CVE-2012-2701 SA-CONTRIB-2012-075 - Take Control - Cross Site Request
> Forgery (CSRF)

These were already assigned.

Request: http://www.openwall.com/lists/oss-security/2012/05/10/6
Response: http://www.openwall.com/lists/oss-security/2012/05/11/2

Reject new identifiers or can we use this in future Drupal contrib issues?

- Henri Salo

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.