View previous topic :: View next topic |
Author |
Message |
yuki
Joined: 18 Apr 2018 Posts: 1
|
Posted: Wed Apr 18, 2018 3:13 am Post subject: How to report Security Issue |
|
|
Hello, I'm not sure how to report security issues in miniupnp.
I guess it's not proper to just open a new thread and post the details before they are fixed.
Could you please tell me how to report such issues? |
|
Back to top |
|
 |
miniupnp Site Admin
Joined: 14 Apr 2007 Posts: 1515
|
Posted: Wed Apr 18, 2018 1:24 pm Post subject: |
|
|
you can send me an email. Or private message on this forum _________________ Main miniUPnP author.
http://miniupnp.tuxfamily.org/ |
|
Back to top |
|
 |
ericjose
Joined: 22 May 2018 Posts: 2
|
Posted: Sun Sep 20, 2020 10:57 am Post subject: |
|
|
yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.
Severity/Risk: Serious
Versions affected: 3.9, 3.8 to 3.8.3, 3.7 to 3.7.6, 3.5 to 3.5.12 and earlier unsupported versions
Versions fixed: 3.9.1, 3.8.4, 3.7.7 and 3.5.13
Reported by: Yuri Zwaig
CVE identifier: CVE-2020-14322
Changes (master): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-68426
Tracker issue: MDL-68426 yui_combo should mitigate denial of service risk |
|
Back to top |
|
 |
|