Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <4FAC11C2.5060507@x-tnd.be>
Date: Thu, 10 May 2012 21:06:42 +0200
From: Johan Cwiklinski <mailings@...nd.be>
To: oss-security@...ts.openwall.com
Subject: CVE-request: galette sql injection

Hello,

Versions 0.63x of galette (out-of-date but mostly used versions for now)
have an sql injection vulnerability.

Could a CVE be assigned for this vulnerability?

This issue has been reported on project's tracker:
http://redmine.ulysses.fr/issues/250

The issue has been fixed
(http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba),
a new release and an official announcment from the project will come
very soon.

Thank you!

-- 
Johan Cwiklinski

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.