oss-sec mailing list archives

Re: CVE requests : Liferay 6.0.6


From: Josh Bressers <bressers () redhat com>
Date: Mon, 11 Apr 2011 15:42:53 -0400 (EDT)

----- Original Message -----
Sorry for the delay, this one was bigger than a breadbox so I needed
to
find a block of time to handle it.

----- Original Message -----
Hello,

version 6.0.6 of Liferay correct 3 security vulnerabilities related
to
the processing of XSLT content and 2 XSS.

The full 6.0.6 Changelog :
http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952

Remote command execution :
http://issues.liferay.com/browse/LPS-14726

Use CVE-2011-1501



Due to an error on my part, CVE-2011-1501 is a dupe. Please use
CVE-2011-1571 for the above issue instead.

Steve, can MITRE mark CVE-2011-1501 as not used.

Thanks.

-- 
    JB


Current thread: