Re: gaining access to libxml2 bugs in bugzilla.gnome.org

--===============2512189988056762087==
Content-Language: en-US
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha256; boundary="B_3554902513_1203454"

--B_3554902513_1203454
Content-type: text/plain;
	charset="US-ASCII"
Content-transfer-encoding: 7bit

Hi Olav,

You said that there is one bug that you kept closed, but there are still
two bugs that I am unable to access with a bugzilla.gnome.org account:
759398 and 759573. Is it intentional that both bugs should not be
accessible?

Regards,
Peter Djalaliev


On 8/23/16, 8:00 AM, "[email protected]"
<[email protected]> wrote:

>Send gnome-bugsquad mailing list submissions to
>	[email protected]
>
>To subscribe or unsubscribe via the World Wide Web, visit
>	https://mail.gnome.org/mailman/listinfo/gnome-bugsquad
>or, via email, send a message with subject or body 'help' to
>	[email protected]
>
>You can reach the person managing the list at
>	[email protected]
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of gnome-bugsquad digest..."
>
>
>Today's Topics:
>
>   1. gaining access to libxml2 bugs in bugzilla.gnome.org
>      (Djalaliev, Peter)
>   2. Re: gaining access to libxml2 bugs in bugzilla.gnome.org
>      (Olav Vitters)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Mon, 22 Aug 2016 18:02:29 +0000
>From: "Djalaliev, Peter" <[email protected]>
>To: "[email protected]" <[email protected]>
>Subject: gaining access to libxml2 bugs in bugzilla.gnome.org
>Message-ID: <D3E0B674.34484%[email protected]>
>Content-Type: text/plain; charset="iso-8859-1"
>
>Hello,
>
>My name is Peter Djalaliev and I am a product security engineer at Blue
>Coat
>Systems (now part of Symantec). We are getting ready to publish a security
>advisory for a number of libxml2 vulnerabilities. We would like to access
>the respective bugs for those vulnerabilities at bugzilla.gnome.org. I
>created an account for myself ([email protected]), but I get
>?not
>authorized? errors for some bugs:
>* CVE-2016-1762: https://bugzilla.gnome.org/show_bug.cgi?id=759671
>* CVE-2016-1834: https://bugzilla.gnome.org/show_bug.cgi?id=763071
>* CVE-2016-1835: https://bugzilla.gnome.org/show_bug.cgi?id=759020
>* CVE-2016-1836: https://bugzilla.gnome.org/show_bug.cgi?id=759398
>* CVE-2016-1837: https://bugzilla.gnome.org/show_bug.cgi?id=760263
>* CVE-2016-1839: https://bugzilla.gnome.org/show_bug.cgi?id=758605
>* CVE-2016-1840: https://bugzilla.gnome.org/show_bug.cgi?id=757711
>* CVE-2016-4447: https://bugzilla.gnome.org/show_bug.cgi?id=759573
>* CVE-2016-4449: https://bugzilla.gnome.org/show_bug.cgi?id=761430
>I can access the bugs for other CVEs:
>* CVE-2016-1833: https://bugzilla.gnome.org/show_bug.cgi?id=758606
>* CVE-2016-1838: https://bugzilla.gnome.org/show_bug.cgi?id=758588
>* CVE-2016-3627/CVE-2016-3705:
>https://bugzilla.gnome.org/show_bug.cgi?id=765207
>* CVE-2016-4448: https://bugzilla.redhat.com/show_bug.cgi?id=1338700
>
>Can you please assist in getting access to the bugs above?
>
>Best regards,
>
>Peter Djalaliev
>Product Security Engineer, PSIRT Member
>www.bluecoat.com
>
>
>-------------- next part --------------
>An HTML attachment was scrubbed...
>URL: 
><https://mail.gnome.org/archives/gnome-bugsquad/attachments/20160822/e53b0
>70f/attachment.html>
>-------------- next part --------------
>A non-text attachment was scrubbed...
>Name: smime.p7s
>Type: application/pkcs7-signature
>Size: 4873 bytes
>Desc: not available
>URL: 
><https://mail.gnome.org/archives/gnome-bugsquad/attachments/20160822/e53b0
>70f/attachment.p7s>
>
>------------------------------
>
>Message: 2
>Date: Mon, 22 Aug 2016 22:27:20 +0200
>From: Olav Vitters <[email protected]>
>To: [email protected]
>Subject: Re: gaining access to libxml2 bugs in bugzilla.gnome.org
>Message-ID: <[email protected]>
>Content-Type: text/plain; charset=iso-8859-1
>
>On Mon, Aug 22, 2016 at 06:02:29PM +0000, Djalaliev, Peter wrote:
>> Can you please assist in getting access to the bugs above?
>
>I've removed the security restrictions from all bugs which have a public
>commit. One bug unfortunately discussed another bug, so I kept that one
>closed.
>
>-- 
>Regards,
>Olav
>
>
>------------------------------
>
>Subject: Digest Footer
>
>_______________________________________________
>gnome-bugsquad mailing list
>[email protected]
>https://mail.gnome.org/mailman/listinfo/gnome-bugsquad
>
>
>------------------------------
>
>End of gnome-bugsquad Digest, Vol 118, Issue 1
>**********************************************

--B_3554902513_1203454
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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--B_3554902513_1203454--

--===============2512189988056762087==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
gnome-bugsquad mailing list
[email protected]
https://mail.gnome.org/mailman/listinfo/gnome-bugsquad

--===============2512189988056762087==--