[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 07 Nov 2012 16:30:53 +0000
From: Matthew Wilkes <matthew.wilkes@...ne.org>
To: Jan Lieskovsky <jlieskov@...hat.com>
CC: oss-security@...ts.openwall.com,
"Steven M. Christey" <coley@...us.mitre.org>,
Jan Pokorny <jpokorny@...hat.com>,
Plone Security Team <security@...ne.org>,
Mitre CVE assign department <cve-assign@...re.org>
Subject: Re: CVE Request - Zope / Plone: Multiple vectors corrected within
20121106 fix
Hi *,
Jan has asked me for a breakdown of what patches in our bulk hotfix
relate to what issues, so here you go:
https://plone.org/products/plone/security/advisories/20121106/01 -
registerConfiglet.py
https://plone.org/products/plone/security/advisories/20121106/02 -
setHeader.py
https://plone.org/products/plone/security/advisories/20121106/03 -
allowmodule.py
https://plone.org/products/plone/security/advisories/20121106/04 -
python_scripts.py createObject
https://plone.org/products/plone/security/advisories/20121106/05 -
get_request_var_or_attr.py
https://plone.org/products/plone/security/advisories/20121106/06 -
kssdevel.py
https://plone.org/products/plone/security/advisories/20121106/07 -
widget_traversal.py
https://plone.org/products/plone/security/advisories/20121106/08 -
uid_catalog.py
https://plone.org/products/plone/security/advisories/20121106/09 - gtbn.py
https://plone.org/products/plone/security/advisories/20121106/10 -
python_scripts.py {u,}translate
https://plone.org/products/plone/security/advisories/20121106/11 -
python_scripts.py go_back
https://plone.org/products/plone/security/advisories/20121106/12 -
kupu_spellcheck.py
https://plone.org/products/plone/security/advisories/20121106/13 -
membership_tool.py
https://plone.org/products/plone/security/advisories/20121106/14 -
queryCatalog.py
https://plone.org/products/plone/security/advisories/20121106/15 -
python_scripts.py formatColumns
https://plone.org/products/plone/security/advisories/20121106/16 -
renameObjectsByPaths.py
https://plone.org/products/plone/security/advisories/20121106/17 -
at_download.py
https://plone.org/products/plone/security/advisories/20121106/18 -
safe_html.py
https://plone.org/products/plone/security/advisories/20121106/19 - ftp.py
https://plone.org/products/plone/security/advisories/20121106/20 -
widget_traversal.py
https://plone.org/products/plone/security/advisories/20121106/21 - atat.py
https://plone.org/products/plone/security/advisories/20121106/22 -
python_scripts.py
https://plone.org/products/plone/security/advisories/20121106/23 -
django_crypto.py
https://plone.org/products/plone/security/advisories/20121106/24 -
random_string
> => preliminary 24 CVE ids needed.
Once we get twenty four assigned I'll match them against this list in
the same order.
Matt
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
