gaining access to libxml2 bugs in bugzilla.gnome.org

"Djalaliev, Peter" <[email protected]> Mon, 22 Aug 2016 18:02:29 +0000
Newsgroups	gmane.comp.gnome.bugsquad
Message-ID	<D3E0B674.34484%[email protected]>
--===============6636108846901332951==
Content-Language: en-US
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha256; boundary="B_3554719348_1020364"

--B_3554719348_1020364
Content-type: multipart/alternative;
	boundary="B_3554719348_1055453"


--B_3554719348_1055453
Content-type: text/plain;
	charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable

Hello,

My name is Peter Djalaliev and I am a product security engineer at Blue Coa=
t
Systems (now part of Symantec). We are getting ready to publish a security
advisory for a number of libxml2 vulnerabilities. We would like to access
the respective bugs for those vulnerabilities at bugzilla.gnome.org. I
created an account for myself ([email protected]), but I get =B3no=
t
authorized=B2 errors for some bugs:
* CVE-2016-1762: https://bugzilla.gnome.org/show_bug.cgi?id=3D759671
* CVE-2016-1834: https://bugzilla.gnome.org/show_bug.cgi?id=3D763071
* CVE-2016-1835: https://bugzilla.gnome.org/show_bug.cgi?id=3D759020
* CVE-2016-1836: https://bugzilla.gnome.org/show_bug.cgi?id=3D759398
* CVE-2016-1837: https://bugzilla.gnome.org/show_bug.cgi?id=3D760263
* CVE-2016-1839: https://bugzilla.gnome.org/show_bug.cgi?id=3D758605
* CVE-2016-1840: https://bugzilla.gnome.org/show_bug.cgi?id=3D757711
* CVE-2016-4447: https://bugzilla.gnome.org/show_bug.cgi?id=3D759573
* CVE-2016-4449: https://bugzilla.gnome.org/show_bug.cgi?id=3D761430
I can access the bugs for other CVEs:
* CVE-2016-1833: https://bugzilla.gnome.org/show_bug.cgi?id=3D758606
* CVE-2016-1838: https://bugzilla.gnome.org/show_bug.cgi?id=3D758588
* CVE-2016-3627/CVE-2016-3705:
https://bugzilla.gnome.org/show_bug.cgi?id=3D765207
* CVE-2016-4448: https://bugzilla.redhat.com/show_bug.cgi?id=3D1338700

Can you please assist in getting access to the bugs above?

Best regards,

Peter Djalaliev
Product Security Engineer, PSIRT Member
www.bluecoat.com



--B_3554719348_1055453
Content-type: text/html;
	charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable

<html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: s=
pace; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size:=
 14px; font-family: Calibri, sans-serif;"><div><div>Hello,</div><div><br></d=
iv><div>My name is Peter Djalaliev and I am a product security engineer at B=
lue Coat Systems (now part of Symantec). We are getting ready to publish a s=
ecurity advisory for a number of libxml2 vulnerabilities. We would like to a=
ccess the respective bugs for those vulnerabilities at bugzilla.gnome.org. I=
 created an account for myself (<a href=3D"mailto:[email protected]=
">[email protected]</a>), but I get &#8220;not authorized&#8221; =
errors for some bugs:</div><ul><li>CVE-2016-1762:&nbsp;<a href=3D"https://bugz=
illa.gnome.org/show_bug.cgi?id=3D759671">https://bugzilla.gnome.org/show_bug.c=
gi?id=3D759671</a></li><li>CVE-2016-1834:&nbsp;<a href=3D"https://bugzilla.gnome=
.org/show_bug.cgi?id=3D763071">https://bugzilla.gnome.org/show_bug.cgi?id=3D7630=
71</a></li><li>CVE-2016-1835:&nbsp;<a href=3D"https://bugzilla.gnome.org/show_=
bug.cgi?id=3D759020">https://bugzilla.gnome.org/show_bug.cgi?id=3D759020</a></li=
><li>CVE-2016-1836:&nbsp;<a href=3D"https://bugzilla.gnome.org/show_bug.cgi?id=
=3D759398">https://bugzilla.gnome.org/show_bug.cgi?id=3D759398</a></li><li>CVE-2=
016-1837:&nbsp;<a href=3D"https://bugzilla.gnome.org/show_bug.cgi?id=3D760263">h=
ttps://bugzilla.gnome.org/show_bug.cgi?id=3D760263</a></li><li>CVE-2016-1839:&=
nbsp;<a href=3D"https://bugzilla.gnome.org/show_bug.cgi?id=3D758605">https://bug=
zilla.gnome.org/show_bug.cgi?id=3D758605</a></li><li>CVE-2016-1840:&nbsp;<a hr=
ef=3D"https://bugzilla.gnome.org/show_bug.cgi?id=3D757711">https://bugzilla.gnom=
e.org/show_bug.cgi?id=3D757711</a></li><li>CVE-2016-4447:&nbsp;<a href=3D"https:=
//bugzilla.gnome.org/show_bug.cgi?id=3D759573">https://bugzilla.gnome.org/show=
_bug.cgi?id=3D759573</a></li><li>CVE-2016-4449:&nbsp;<a href=3D"https://bugzilla=
.gnome.org/show_bug.cgi?id=3D761430">https://bugzilla.gnome.org/show_bug.cgi?i=
d=3D761430</a></li></ul><div>I can access the bugs for other CVEs:</div><ul><l=
i>CVE-2016-1833:&nbsp;<a href=3D"https://bugzilla.gnome.org/show_bug.cgi?id=3D75=
8606">https://bugzilla.gnome.org/show_bug.cgi?id=3D758606</a></li><li>CVE-2016=
-1838:&nbsp;<a href=3D"https://bugzilla.gnome.org/show_bug.cgi?id=3D758588">http=
s://bugzilla.gnome.org/show_bug.cgi?id=3D758588</a></li><li>CVE-2016-3627/CVE-=
2016-3705:&nbsp;<a href=3D"https://bugzilla.gnome.org/show_bug.cgi?id=3D765207">=
https://bugzilla.gnome.org/show_bug.cgi?id=3D765207</a></li><li>CVE-2016-4448:=
&nbsp;<a href=3D"https://bugzilla.redhat.com/show_bug.cgi?id=3D1338700">https://=
bugzilla.redhat.com/show_bug.cgi?id=3D1338700</a></li></ul><div><br></div><div=
>Can you please assist in getting access to the bugs above?</div><div><br></=
div><div>Best regards,</div><div><br></div><div><div>Peter Djalaliev</div><d=
iv>Product Security Engineer, PSIRT Member</div><div>www.bluecoat.com</div><=
/div></div></body></html>

--B_3554719348_1055453--

--B_3554719348_1020364
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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--B_3554719348_1020364--

--===============6636108846901332951==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
gnome-bugsquad mailing list
[email protected]
https://mail.gnome.org/mailman/listinfo/gnome-bugsquad

--===============6636108846901332951==--