Home page logo
/

oss-sec logo oss-sec mailing list archives

RSGallery2 before 2.3.0 (etc.) CVE-2012-3554 CVE-2012-4071
From: cve-assign () mitre org
Date: Tue, 31 Jul 2012 14:44:37 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142
http://joomlacode.org/gf/project/rsgallery2/news/
http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html

"The RSGallery2 team is pleased to announce the release of RSGallery2
3.2.0 for Joomla 2.5.x and RSGallery2 2.3.0 for Joomla 1.5.x. These
are security releases, users are advised to upgrade immediately. A
special thank you goes to Stergios Kolios."

This announcement already has CVE assignments (at least CVE-2012-3554
and CVE-2012-4071; possibly others) but we are still coordinating with
the researcher to determine if any details will be released.
Therefore, this message about the CVE assignments may be useful to
only a limited audience.

The changelog.php files in the RSGallery2 2.3.0 and 3.2.0 downloads
currently do not label any specific changelog entries as security
fixes with their "* -> Security Fix" notation. It might or might not
turn out that one or more of the changelog entries actually is
associated with either CVE-2012-3554 or CVE-2012-4071.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)

iQEcBAEBAgAGBQJQGCcGAAoJEGvefgSNfHMd6gMIALSNKsFP/VU+FlJ+/Zrtr1jC
eNDbFycw54tuSXdgyCAqIoS4uxyYbi6UaS+QRJbUMyvaiDUZ6UywvaBEUFDcxxpY
7nYFYOGeMBz+6qs1Q/mfXu4FAfqOYnDoFXTAosTyYdFFLPBMUdga5+awNHk9mYh9
rUMnlHpGrszmoYhbtxs1xtvwTNGq13rpYmPB8yUTxUuAFnON9yT7umpVKHWJR0G/
kT4c35Zt1KR7vydbHwgXePYWm1LdcvbWpfxARy46qSznbGubqOK5GwnDVP4ygvkw
7egMxRe48ab3zrpXMhINnH9eNq/I8dBMwB6KPSNh3gI3OzSek5pAA3FrH8MnbWM=
=rRcu
-----END PGP SIGNATURE-----


  By Date           By Thread  

Current thread:
  • RSGallery2 before 2.3.0 (etc.) CVE-2012-3554 CVE-2012-4071 cve-assign (Jul 31)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]