oss-sec mailing list archives

CVE request: simple machines forum


From: Hanno Böck <hanno () hboeck de>
Date: Sun, 6 Jul 2008 18:31:40 +0200

http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0


"This version addresses a few security issues and fixes some small bugs."

These sound like security issues:
* Sanitation of $topic wasn't always done right.
* Fixed a vulnerability with the use of the html-tag - issue reported by 
Jessica Hope.

Though they don't list which issues are security relevant.

They also don't mention if CVE-2007-5943 is fixed.

-- 
Hanno Böck              Blog:           http://www.hboeck.de/
GPG: 3DBD3B20           Jabber/Mail:    hanno () hboeck de

Attachment: signature.asc
Description: This is a digitally signed message part.


Current thread: