Re: gaining access to libxml2 bugs in bugzilla.gnome.org



Hi Olav,

You said that there is one bug that you kept closed, but there are still
two bugs that I am unable to access with a bugzilla.gnome.org account:
759398 and 759573. Is it intentional that both bugs should not be
accessible?

Regards,
Peter Djalaliev


On 8/23/16, 8:00 AM, "gnome-bugsquad-request gnome org"
<gnome-bugsquad-request gnome org> wrote:

Send gnome-bugsquad mailing list submissions to
      gnome-bugsquad gnome org

To subscribe or unsubscribe via the World Wide Web, visit
      https://mail.gnome.org/mailman/listinfo/gnome-bugsquad
or, via email, send a message with subject or body 'help' to
      gnome-bugsquad-request gnome org

You can reach the person managing the list at
      gnome-bugsquad-owner gnome org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of gnome-bugsquad digest..."


Today's Topics:

  1. gaining access to libxml2 bugs in bugzilla.gnome.org
     (Djalaliev, Peter)
  2. Re: gaining access to libxml2 bugs in bugzilla.gnome.org
     (Olav Vitters)


----------------------------------------------------------------------

Message: 1
Date: Mon, 22 Aug 2016 18:02:29 +0000
From: "Djalaliev, Peter" <peter djalaliev bluecoat com>
To: "gnome-bugsquad gnome org" <gnome-bugsquad gnome org>
Subject: gaining access to libxml2 bugs in bugzilla.gnome.org
Message-ID: <D3E0B674 34484%peter djalaliev bluecoat com>
Content-Type: text/plain; charset="iso-8859-1"

Hello,

My name is Peter Djalaliev and I am a product security engineer at Blue
Coat
Systems (now part of Symantec). We are getting ready to publish a security
advisory for a number of libxml2 vulnerabilities. We would like to access
the respective bugs for those vulnerabilities at bugzilla.gnome.org. I
created an account for myself (peter djalaliev bluecoat com), but I get
?not
authorized? errors for some bugs:
* CVE-2016-1762: https://bugzilla.gnome.org/show_bug.cgi?id=759671
* CVE-2016-1834: https://bugzilla.gnome.org/show_bug.cgi?id=763071
* CVE-2016-1835: https://bugzilla.gnome.org/show_bug.cgi?id=759020
* CVE-2016-1836: https://bugzilla.gnome.org/show_bug.cgi?id=759398
* CVE-2016-1837: https://bugzilla.gnome.org/show_bug.cgi?id=760263
* CVE-2016-1839: https://bugzilla.gnome.org/show_bug.cgi?id=758605
* CVE-2016-1840: https://bugzilla.gnome.org/show_bug.cgi?id=757711
* CVE-2016-4447: https://bugzilla.gnome.org/show_bug.cgi?id=759573
* CVE-2016-4449: https://bugzilla.gnome.org/show_bug.cgi?id=761430
I can access the bugs for other CVEs:
* CVE-2016-1833: https://bugzilla.gnome.org/show_bug.cgi?id=758606
* CVE-2016-1838: https://bugzilla.gnome.org/show_bug.cgi?id=758588
* CVE-2016-3627/CVE-2016-3705:
https://bugzilla.gnome.org/show_bug.cgi?id=765207
* CVE-2016-4448: https://bugzilla.redhat.com/show_bug.cgi?id=1338700

Can you please assist in getting access to the bugs above?

Best regards,

Peter Djalaliev
Product Security Engineer, PSIRT Member
www.bluecoat.com


-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
<https://mail.gnome.org/archives/gnome-bugsquad/attachments/20160822/e53b0
70f/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4873 bytes
Desc: not available
URL: 
<https://mail.gnome.org/archives/gnome-bugsquad/attachments/20160822/e53b0
70f/attachment.p7s>

------------------------------

Message: 2
Date: Mon, 22 Aug 2016 22:27:20 +0200
From: Olav Vitters <olav vitters nl>
To: gnome-bugsquad gnome org
Subject: Re: gaining access to libxml2 bugs in bugzilla.gnome.org
Message-ID: <20160822202720 GB5924 bkor dhs org>
Content-Type: text/plain; charset=iso-8859-1

On Mon, Aug 22, 2016 at 06:02:29PM +0000, Djalaliev, Peter wrote:
Can you please assist in getting access to the bugs above?

I've removed the security restrictions from all bugs which have a public
commit. One bug unfortunately discussed another bug, so I kept that one
closed.

-- 
Regards,
Olav


------------------------------

Subject: Digest Footer

_______________________________________________
gnome-bugsquad mailing list
gnome-bugsquad gnome org
https://mail.gnome.org/mailman/listinfo/gnome-bugsquad


------------------------------

End of gnome-bugsquad Digest, Vol 118, Issue 1
**********************************************

Attachment: smime.p7s
Description: S/MIME cryptographic signature



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]