oss-security - Re: CVE Request -- WordPress v3.1.2

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1322076797.291534.1304365352648.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 2 May 2011 15:42:32 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Request -- WordPress v3.1.2

----- Original Message -----
> Hello Josh, Steve, vendors,
> 
> WordPress upstream has released v3.1.2 addressing one security issue:
> [1] http://wordpress.org/news/
> 
> More from [1]:
> "This release addresses a vulnerability that allowed Contributor-level
> users to improperly publish posts.  The issue was discovered by a member
> of our security team, WordPress developer Andrew Nacin, with Benjamin
> Balter."
> 

Please use CVE-2011-1762.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.