oss-security - Re: CVE request: Drupal views module CSRF/XSS before 2.11, XSS before 2.12

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <526616898.46208.1292978253955.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Tue, 21 Dec 2010 19:37:33 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: Steve Christey <coley@...us.mitre.org>
Subject: Re: CVE request: Drupal views module CSRF/XSS before
 2.11, XSS before 2.12

Sorry for the delay.

----- Original Message -----
> Two CVEs CSRF and XSS before 2.11:
> http://drupal.org/node/829840

Please use CVE-2010-4519 for the CSRF.
CVE-2010-4520 for the XSS.

> 
> One CVE for XSS before 2.12:
> http://drupal.org/node/999380
> 

CVE-2010-4521 for this XSS.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.