oss-sec mailing list archives

Re: Re: [security] Drupal CORE and Drupal Contrib

From: Kurt Seifried <kseifried () redhat com>
Date: Wed, 21 Mar 2012 21:31:29 -0600

On 03/21/2012 01:05 PM, Moritz Muehlenhoff wrote:

On Mon, Mar 19, 2012 at 12:33:37PM -0600, Kurt Seifried wrote:

http://drupal.org/node/1168756
SA-CORE-2011-001 - Drupal core - Multiple vulnerabilities
Can't find any CVE's, do they need to be assigned?


Yes, there's been no CVE assignment so far. Debian fixed
this in a point update:
http://packages.qa.debian.org/d/drupal6/news/20110627T195934Z.html

Cheers,
        Moritz


I'm planning to do a mass CVE assignment for all the oustanding Drupal
CORE/Contrib stuff this weekend.

-- 
Kurt Seifried Red Hat Security Response Team (SRT)

Current thread:

Drupal CORE and Drupal Contrib Kurt Seifried (Mar 16)
- Re: [security] Drupal CORE and Drupal Contrib Greg Knaddison (Mar 16)
  - Re: Re: [security] Drupal CORE and Drupal Contrib Kurt Seifried (Mar 19)
    - Re: Re: [security] Drupal CORE and Drupal Contrib Greg Knaddison (Mar 20)
    - Re: Re: [security] Drupal CORE and Drupal Contrib Moritz Muehlenhoff (Mar 21)
    - Re: Re: [security] Drupal CORE and Drupal Contrib Kurt Seifried (Mar 21)