[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4FA9F63E.10004@redhat.com>
Date: Tue, 08 May 2012 22:44:46 -0600
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: Hanno Böck <hanno@...eck.de>
Subject: Re: CVE request: Piwik before 1.7
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 05/08/2012 03:03 AM, Hanno Böck wrote:
> Hi,
>
> http://piwik.org/blog/2012/02/7775/
>
> Information is very rare: "We would like to thank the following
> security researchers for their responsible disclosure of XSS &
> click-jacking issues: Piotr Duszynski, Sergey Markov, Mauro
> Gentile."
>
> I'd suggest assigning 3 CVEs with subjects like
>
> "Unknown XSS or clickjacking issue identified by Piotr Duszynski"
> "Unknown XSS or clickjacking issue identified by Sergey Markov"
> "Unknown XSS or clickjacking issue identified by Mauro Gentile"
We would like to thank the following security researchers for their
responsible disclosure of XSS & click-jacking issues: Piotr Duszynski,
Sergey Markov, Mauro Gentile.
Thank you for disclosing security issues to the Piwik team, ensuring a
healthy and safe experience for the whole community!
I can't find anything else. Can you send the code commits that address
this?
- --
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=iid8
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
