oss-security - Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 24 Feb 2011 09:45:30 -0700
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>,
        Shawn M Moore <sartak@...tpractical.com>,
        Ralf Cors?pius <rc040203@...enet.de>, security@...tpractical.com,
        Jan Lieskovsky <jlieskov@...hat.com>
Subject: Re: Re: CVE Request -- rt3 -- two issues: 1) Improper
 management of form data resubmittion upon user log out 2) SQL queries
 information leak by user account transition

* [2011-02-23 14:06:58 -0500] Josh Bressers wrote:

>> Is Redhat packaging RT now, or are you just handling the CVEs?
>
>I'm not aware of Red Hat packaging RT. I'm just assign CVE ids to
>public issues.

RT3 is packaged in Fedora and EPEL.

-- 
Vincent Danen / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.