[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <1199474359.8390821.1375119761052.JavaMail.root@redhat.com>
Date: Mon, 29 Jul 2013 13:42:41 -0400 (EDT)
From: Jan Lieskovsky <jlieskov@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>,
phpMyAdmin security team <security@...myadmin.net>,
Mitre CVE assign department <cve-assign@...re.org>
Subject: CVE Request -- phpMyAdmin 3.5.8.2 and 4.0.4.2 are released
Hello Kurt, Steve, phpMyAdmin security team, vendors,
phpMyAdmin upstream has recently released 3.5.8.2 and 4.0.4.2 of phpMyAdmin
administration too:
[1] http://www.phpmyadmin.net/home_page/news.php#phpMyAdmin_3.5.8.2_and_4.0.4.2_are_released
correcting multiple security flaws (PMASA-2013-10.php is reserved for future use, see [1]):
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-8.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-9.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-11.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-12.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-13.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-14.php
* http://www.phpmyadmin.net/home_page/security/PMASA-2013-15.php
Doesn't look CVE identifiers have been already allocated to these?
Could you assign them? (Cc-ing phpMyAdmin security team to confirm
these weren't assigned yet [and Mitre's CVE assigning department
since having an impression, we have previously discussed this and
the conclusion was Mitre CVE department will assign them {but maybe
it wasn't case of phpMyAdmin, not sure right now}]).
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
