[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] RSGallery2 before 2.3.0 (etc.) CVE-2012-3554 CVE-2012-4071
From:       cve-assign () mitre ! org
Date:       2012-07-31 18:44:37
Message-ID: 201207311844.q6VIibEG011425 () linus ! mitre ! org
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142
http://joomlacode.org/gf/project/rsgallery2/news/
http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html

"The RSGallery2 team is pleased to announce the release of RSGallery2
3.2.0 for Joomla 2.5.x and RSGallery2 2.3.0 for Joomla 1.5.x. These
are security releases, users are advised to upgrade immediately. A
special thank you goes to Stergios Kolios."

This announcement already has CVE assignments (at least CVE-2012-3554
and CVE-2012-4071; possibly others) but we are still coordinating with
the researcher to determine if any details will be released.
Therefore, this message about the CVE assignments may be useful to
only a limited audience.

The changelog.php files in the RSGallery2 2.3.0 and 3.2.0 downloads
currently do not label any specific changelog entries as security
fixes with their "* -> Security Fix" notation. It might or might not
turn out that one or more of the changelog entries actually is
associated with either CVE-2012-3554 or CVE-2012-4071.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)

iQEcBAEBAgAGBQJQGCcGAAoJEGvefgSNfHMd6gMIALSNKsFP/VU+FlJ+/Zrtr1jC
eNDbFycw54tuSXdgyCAqIoS4uxyYbi6UaS+QRJbUMyvaiDUZ6UywvaBEUFDcxxpY
7nYFYOGeMBz+6qs1Q/mfXu4FAfqOYnDoFXTAosTyYdFFLPBMUdga5+awNHk9mYh9
rUMnlHpGrszmoYhbtxs1xtvwTNGq13rpYmPB8yUTxUuAFnON9yT7umpVKHWJR0G/
kT4c35Zt1KR7vydbHwgXePYWm1LdcvbWpfxARy46qSznbGubqOK5GwnDVP4ygvkw
7egMxRe48ab3zrpXMhINnH9eNq/I8dBMwB6KPSNh3gI3OzSek5pAA3FrH8MnbWM=
=rRcu
-----END PGP SIGNATURE-----
[prev in list] [next in list] [prev in thread] [next in thread]