oss-security - CVE Request -- WordPress v3.1.2

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4DBEC773.3080005@redhat.com>
Date: Mon, 02 May 2011 17:02:11 +0200
From: Jan Lieskovsky <jlieskov@...hat.com>
To: "Steven M. Christey" <coley@...us.mitre.org>
CC: oss-security <oss-security@...ts.openwall.com>
Subject: CVE Request -- WordPress v3.1.2

Hello Josh, Steve, vendors,

   WordPress upstream has released v3.1.2 addressing one security issue:
   [1] http://wordpress.org/news/

   More from [1]:
   "This release addresses a vulnerability that allowed Contributor-level users to improperly publish posts.
   The issue was discovered by a member of our security team, WordPress developer Andrew Nacin, with Benjamin Balter."

Could you allocate a CVE id for this?

Thank you & Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.