oss-security - Three CVE requests: at-spi2-atk, as31, naxsi

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20120705190024.GA19386@inutil.org>
Date: Thu, 5 Jul 2012 21:00:24 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Three CVE requests: at-spi2-atk, as31, naxsi

Hi,
please assign CVE IDs for the following issues:

1. Insecure tempfile handling in the Gnome accessibiliy component at-spi2-atk
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678026
https://bugzilla.gnome.org/show_bug.cgi?id=678348

2. Insecure tempfile handling in the as31 assembler
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655496
Homepage: http://wiki.erazor-zone.de/doku.php?id=wiki:projects:linux:as31

3. File disclosure in Naxsi web application firewall module for Nginx (also 
shipped in the Debian nginx package):
http://code.google.com/p/naxsi/
http://code.google.com/p/naxsi/source/detail?r=307

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.