oss-security - CVE requests: drupal and phpbb

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Thu, 10 Apr 2008 21:09:42 +0200
From: Hanno Böck <hanno@...eck.de>
To: "Steven M. Christey" <coley@...us.mitre.org>
Cc: oss-security@...ts.openwall.com
Subject: CVE requests: drupal and phpbb

phpbb:
Release notes of 3.0.1 mention
"We are very pleased to announce the availability of the phpBB 3.0.1 package. 
This version has seen numerous stability fixes, performance tweaks and 
general bugs fixed. Additionally two minor security-related bugs were fixs."
I couldn't find pointers to the security bugs.

drupal:
http://drupal.org/node/244637
(Drupal SA-2008-026)

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.