oss-security - CVE request for bitlbee

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080829232414.GR16514@genesis.frugalware.org>
Date: Sat, 30 Aug 2008 01:24:14 +0200
From: Miklos Vajna <vmiklos@...galware.org>
To: oss-security@...ts.openwall.com
Cc: coley@...re.org
Subject: CVE request for bitlbee

Hi,

bitlbee-1.2.2 is released, and it comes with a NULL pointer dereference
fix, which allows people to hijack accounts.

More info:

http://bitlbee.org/main.php/changelog.html

and

http://code.bitlbee.org/hgweb/release?cmd=revision;revid=wilmer%40gaast.net-20080825204848-bzp7ye1i07bpnole

Can I get a CVE id please?

Thanks,

Miklos

Content of type "application/pgp-signature" skipped

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.