[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20120615061914.GD6989@kludge.henri.nerv.fi>
Date: Fri, 15 Jun 2012 09:19:14 +0300
From: Henri Salo <henri@...v.fi>
To: oss-security@...ts.openwall.com
Cc: Greg Knaddison <greg.knaddison@...uia.com>,
Kurt Seifried <kseifried@...hat.com>
Subject: Re: CVE Request for Drupal contributed modules
On Wed, Jun 13, 2012 at 08:32:11PM -0600, Kurt Seifried wrote:
> CVE-2012-2699 SA-CONTRIB-2012-073 - Glossary - Cross-Site Scripting (XSS)
> CVE-2012-2700 SA-CONTRIB-2012-074 - Contact Forms - Access Bypass
> CVE-2012-2701 SA-CONTRIB-2012-075 - Take Control - Cross Site Request
> Forgery (CSRF)
These were already assigned.
Request: http://www.openwall.com/lists/oss-security/2012/05/10/6
Response: http://www.openwall.com/lists/oss-security/2012/05/11/2
Reject new identifiers or can we use this in future Drupal contrib issues?
- Henri Salo
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
