miniupnp.tuxfamily.org Forum Index miniupnp.tuxfamily.org
The forum about miniupnp and libnatpmp
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

How to report Security Issue

 
Post new topic   Reply to topic    miniupnp.tuxfamily.org Forum Index -> miniupnpc Bugs
View previous topic :: View next topic  
Author Message
yuki



Joined: 18 Apr 2018
Posts: 1

PostPosted: Wed Apr 18, 2018 3:13 am    Post subject: How to report Security Issue Reply with quote

Hello, I'm not sure how to report security issues in miniupnp.

I guess it's not proper to just open a new thread and post the details before they are fixed.

Could you please tell me how to report such issues?
Back to top
View user's profile Send private message
miniupnp
Site Admin


Joined: 14 Apr 2007
Posts: 1501

PostPosted: Wed Apr 18, 2018 1:24 pm    Post subject: Reply with quote

you can send me an email. Or private message on this forum
_________________
Main miniUPnP author.
http://miniupnp.tuxfamily.org/
Back to top
View user's profile Send private message Visit poster's website
ericjose



Joined: 22 May 2018
Posts: 2

PostPosted: Sun Sep 20, 2020 10:57 am    Post subject: Reply with quote

yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.



Severity/Risk: Serious
Versions affected: 3.9, 3.8 to 3.8.3, 3.7 to 3.7.6, 3.5 to 3.5.12 and earlier unsupported versions
Versions fixed: 3.9.1, 3.8.4, 3.7.7 and 3.5.13
Reported by: Yuri Zwaig
CVE identifier: CVE-2020-14322
Changes (master): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-68426
Tracker issue: MDL-68426 yui_combo should mitigate denial of service risk
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    miniupnp.tuxfamily.org Forum Index -> miniupnpc Bugs All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
Protected by Anti-Spam ACP
© 2007 Thomas Bernard, author of MiniUPNP.