[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20171008120436.5dmapb3v6cwzsnjg@tunkki.bugs.fi>
Date: Sun, 8 Oct 2017 15:04:36 +0300
From: "Henri S." <henri@...v.fi>
To: chbi@...i.eu
Cc: oss-security@...ts.openwall.com
Subject: Re: Several Privilege Escalation issues in Kanboard
<= 1.0.46
On Wed, Oct 04, 2017 at 08:18:40PM +0200, chbi@...i.eu wrote:
> https://kanboard.net/news/version-1.0.47
>
> Should I request a CVE ID for each issue or one CVE ID for all issues?
I usually request one CVE identifier per issue type if they are fixed in the
same version and reported by the same person. Could you notify the list when
you have received the CVEs, thanks.
--
Henri Salo
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
