Date: Tue, 31 Jul 2012 14:44:37 -0400 (EDT) From: cve-assign@...re.org To: oss-security@...ts.openwall.com Cc: cve-assign@...re.org Subject: RSGallery2 before 2.3.0 (etc.) CVE-2012-3554 CVE-2012-4071 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142 http://joomlacode.org/gf/project/rsgallery2/news/ http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html "The RSGallery2 team is pleased to announce the release of RSGallery2 3.2.0 for Joomla 2.5.x and RSGallery2 2.3.0 for Joomla 1.5.x. These are security releases, users are advised to upgrade immediately. A special thank you goes to Stergios Kolios." This announcement already has CVE assignments (at least CVE-2012-3554 and CVE-2012-4071; possibly others) but we are still coordinating with the researcher to determine if any details will be released. Therefore, this message about the CVE assignments may be useful to only a limited audience. The changelog.php files in the RSGallery2 2.3.0 and 3.2.0 downloads currently do not label any specific changelog entries as security fixes with their "* -> Security Fix" notation. It might or might not turn out that one or more of the changelog entries actually is associated with either CVE-2012-3554 or CVE-2012-4071. - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (SunOS) iQEcBAEBAgAGBQJQGCcGAAoJEGvefgSNfHMd6gMIALSNKsFP/VU+FlJ+/Zrtr1jC eNDbFycw54tuSXdgyCAqIoS4uxyYbi6UaS+QRJbUMyvaiDUZ6UywvaBEUFDcxxpY 7nYFYOGeMBz+6qs1Q/mfXu4FAfqOYnDoFXTAosTyYdFFLPBMUdga5+awNHk9mYh9 rUMnlHpGrszmoYhbtxs1xtvwTNGq13rpYmPB8yUTxUuAFnON9yT7umpVKHWJR0G/ kT4c35Zt1KR7vydbHwgXePYWm1LdcvbWpfxARy46qSznbGubqOK5GwnDVP4ygvkw 7egMxRe48ab3zrpXMhINnH9eNq/I8dBMwB6KPSNh3gI3OzSek5pAA3FrH8MnbWM= =rRcu -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.