oss-security - CVE request for Drupal core, and contributed modules

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CABbbngCsfunhvGac_sLSNDU-x6yv_cdXmct3AB=vr0EqSM1SPA@mail.gmail.com>
Date: Wed, 6 Aug 2014 17:10:13 -0700
From: Forest Monsen <forest.monsen@...il.com>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Cc: Mitre CVE assign department <cve-assign@...re.org>
Subject: CVE request for Drupal core, and contributed modules

Hi there,

We'd like to request a CVE identifier for Drupal Core:

SA-CORE-2014-004 - Drupal core - Denial of service
https://www.drupal.org/SA-CORE-2014-004

And the appropriate number for the following Drupal contributed modules:

SA-CONTRIB-2014-075 - Biblio Autocomplete - SQL Injection and Access Bypass
https://www.drupal.org/node/2316717

SA-CONTRIB-2014-076 - Fasttoggle - Access bypass
https://www.drupal.org/node/2316747

Thanks -

Forest Monsen, for the Drupal Security Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.