Skip To Main Content
Hello Jacques on Muck Rack

Hello Jacques

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Hello Jacques’s profile

Articles by Hello Jacques

Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

|
By Jacques Le Roux, Hi Seth, Hello Jacques
| seclists.org
oss-sec mailing list archives From: Jacques Le Roux <jacques.le.roux () les7arts com> Date: Wed, 19 Apr 2023 08:25:36 +0200 Hi Seth, As I guess you know, the ASF has many (350+) projects: https://projects.apache.org/ OFBiz is only one of these projects. An "old" one, IIRW it was the 26th to get in. I say that because we have our own security team. Yet, all projects are overseen and especially helped by the ASF security team for security matter.
Open in Who Shared Issue with article?

Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

|
By Seth Arnold, Hello Jacques
| seclists.org
oss-sec mailing list archives From: Seth Arnold <seth.arnold () canonical com> Date: Wed, 19 Apr 2023 01:29:30 +0000 On Tue, Apr 18, 2023 at 11:15:52AM +0200, Jacques Le Roux wrote: Hello Jacques, thanks for the reply.
Open in Who Shared Issue with article?

Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

|
By Jacques Le Roux, Hi Seth, on Mon, Hello Jacques
| seclists.org
oss-sec mailing list archives From: Jacques Le Roux <jleroux () apache org> Date: Tue, 18 Apr 2023 11:15:52 +0200 Hi Seth, I used to give more information. For this one, using our "new" internal process* (need an ASF credential) and following step 11 of**, notably <<Generally, reports should contain enough information to enable people to assess the risk the vulnerability poses for their own system, and no more.>> I restricted the information to a minimum.
Open in Who Shared Issue with article?

Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

|
By Seth Arnold, on Mon, Hello Jacques
| seclists.org
oss-sec mailing list archives From: Seth Arnold <seth.arnold () canonical com> Date: Tue, 18 Apr 2023 01:27:52 +0000 On Mon, Apr 10, 2023 at 09:21:11AM +0000, Jacques Le Roux wrote: Hello Jacques, thanks for contacting the oss-security mail list about this security issue in an Apache project.
Open in Who Shared Issue with article?
Show More