oss-security - CVE request for Drupal contributed modules

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <51019D8A.6020605@gmail.com>
Date: Thu, 24 Jan 2013 12:46:02 -0800
From: Forest Monsen <forest.monsen@...il.com>
To: oss-security@...ts.openwall.com
CC: Kurt Seifried <kseifried@...hat.com>
Subject: CVE request for Drupal contributed modules

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, here's a request for CVE IDs for several contributed modules:

SA-CONTRIB-2013-006 - Video - Arbitrary Code Execution
https://drupal.org/node/1896714

SA-CONTRIB-2013-007 User Relationships - Cross Site Scripting (XSS)
https://drupal.org/node/1896720

SA-CONTRIB-2013-009 - Keyboard Shortcut Utility - Access Bypass -
module unsupported
https://drupal.org/node/1896752

SA-CONTRIB-2013-010 - Search API sorts - Cross Site Scripting (XSS)
https://drupal.org/node/1896782

Thanks,
Forest
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlEBnYAACgkQ/ILCL9e1Br5YcQCeNvawNkdlY9MCLAwK8WtR8aFI
z5YAnAliJHMiMT+NBNaMFVgkq/tpEWRr
=AKbS
-----END PGP SIGNATURE-----

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.