oss-security - Re: CVE request: Curl insecure usage

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20121226113818.GA6438@pisco.westfalen.local>
Date: Wed, 26 Dec 2012 12:38:19 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: Curl insecure usage

On Thu, Nov 29, 2012 at 10:44:36PM +0100, Moritz Mühlenhoff wrote:
> > Also can someone collate and post a list of all the other apps using
> > curl insecurely and need CVE's with appropriate links to the
> > upstreams/etc? Thanks.
> 
> There are some, which are potentially affected, but where discussion
> with upstream is still pending.

Here are two more, please assign CVE IDs (both discovered by
Alessandro Ghedini):

1. Falcon programming language:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696681

2. NuSOAP PHP package:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696707

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.