Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 7 Oct 2014 15:13:51 +0400
From: Solar Designer <>
Subject: "New Class of Vulnerability in Perl Web Applications"


I feel this is worth bringing in here (and I wish someone wrote a proper
mailing list posting with this info, to have it properly archived):

New Class of Vulnerability in Perl Web Applications

"While perl may have a particularly subtle manifestation, this is not Perl-specific."

Bugzilla 4.0.14, 4.2.10, 4.4.5, and 4.5.5 Security Advisory

Bug 1074812 - (CVE-2014-1572) [SECURITY] The 'realname' parameter is not correctly filtered on user account creation, leading to user data override (Russian)


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.