oss-security - CVE Request -- ModSecurity

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <4B728C72.3050001@redhat.com>
Date: Wed, 10 Feb 2010 11:37:38 +0100
From: Jan Lieskovsky <jlieskov@...hat.com>
To: oss-security <oss-security@...ts.openwall.com>
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE Request -- ModSecurity - v2.5.12

Hi Steve, vendors,

   multiple security flaws, which might lead to bypass of intended
security restrictions and denial of service, have been reported
and corrected in latest v2.5.12 version of ModSecurity.

References:
[1] http://sourceforge.net/projects/mod-security/files/modsecurity-apache/2.5.12/CHANGES_2.5.12.txt/download
[2] https://bugzilla.redhat.com/show_bug.cgi?id=563455
[3] http://secunia.com/advisories/38460/
[4] http://freshmeat.net/projects/modsecurity/releases/312017
[5] http://www.modsecurity.org/

Could you allocate CVE ids for these?

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.