[<prev] [next>] [day] [month] [year] [list]
Message-Id: <201207311844.q6VIibEG011425@linus.mitre.org>
Date: Tue, 31 Jul 2012 14:44:37 -0400 (EDT)
From: cve-assign@...re.org
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: RSGallery2 before 2.3.0 (etc.) CVE-2012-3554 CVE-2012-4071
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142
http://joomlacode.org/gf/project/rsgallery2/news/
http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html
"The RSGallery2 team is pleased to announce the release of RSGallery2
3.2.0 for Joomla 2.5.x and RSGallery2 2.3.0 for Joomla 1.5.x. These
are security releases, users are advised to upgrade immediately. A
special thank you goes to Stergios Kolios."
This announcement already has CVE assignments (at least CVE-2012-3554
and CVE-2012-4071; possibly others) but we are still coordinating with
the researcher to determine if any details will be released.
Therefore, this message about the CVE assignments may be useful to
only a limited audience.
The changelog.php files in the RSGallery2 2.3.0 and 3.2.0 downloads
currently do not label any specific changelog entries as security
fixes with their "* -> Security Fix" notation. It might or might not
turn out that one or more of the changelog entries actually is
associated with either CVE-2012-3554 or CVE-2012-4071.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)
iQEcBAEBAgAGBQJQGCcGAAoJEGvefgSNfHMd6gMIALSNKsFP/VU+FlJ+/Zrtr1jC
eNDbFycw54tuSXdgyCAqIoS4uxyYbi6UaS+QRJbUMyvaiDUZ6UywvaBEUFDcxxpY
7nYFYOGeMBz+6qs1Q/mfXu4FAfqOYnDoFXTAosTyYdFFLPBMUdga5+awNHk9mYh9
rUMnlHpGrszmoYhbtxs1xtvwTNGq13rpYmPB8yUTxUuAFnON9yT7umpVKHWJR0G/
kT4c35Zt1KR7vydbHwgXePYWm1LdcvbWpfxARy46qSznbGubqOK5GwnDVP4ygvkw
7egMxRe48ab3zrpXMhINnH9eNq/I8dBMwB6KPSNh3gI3OzSek5pAA3FrH8MnbWM=
=rRcu
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
