Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 29 Jul 2013 13:42:41 -0400 (EDT)
From: Jan Lieskovsky <jlieskov@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>,
        phpMyAdmin security team <security@...myadmin.net>,
        Mitre CVE assign department <cve-assign@...re.org>
Subject: CVE Request -- phpMyAdmin 3.5.8.2 and 4.0.4.2 are released

Hello Kurt, Steve, phpMyAdmin security team, vendors,

  phpMyAdmin upstream has recently released 3.5.8.2 and 4.0.4.2 of phpMyAdmin
administration too:
  [1] http://www.phpmyadmin.net/home_page/news.php#phpMyAdmin_3.5.8.2_and_4.0.4.2_are_released

correcting multiple security flaws (PMASA-2013-10.php is reserved for future use, see [1]):
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-8.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-9.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-11.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-12.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-13.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-14.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-15.php

Doesn't look CVE identifiers have been already allocated to these?

Could you assign them? (Cc-ing phpMyAdmin security team to confirm
these weren't assigned yet [and Mitre's CVE assigning department
since having an impression, we have previously discussed this and
the conclusion was Mitre CVE department will assign them {but maybe
it wasn't case of phpMyAdmin, not sure right now}]).

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.