oss-security - Re: CVE request: mybb before 1.4.11 and before 1.4.12

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1102902686.160471286826830871.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 11 Oct 2010 15:53:50 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request: mybb before 1.4.11 and before
 1.4.12


----- "Hanno Böck" <hanno@...eck.de> wrote:

> http://blog.mybb.com/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/

This will need a 2009 ID.

> 
> and
> 
> http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/
> 

This update hints there are security fixes, but I can't tell what they are.
Does someone have more information? If not I'll let MITRE assign a generic
"something is broken" sort of ID.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.