Add Ronak for spotting and reporting open Apache HTTPD server status

This commit is contained in:
Oliver Falk
2019-08-27 08:59:58 +02:00
parent 4f6ba484e4
commit 37bc93a80f

View File

@@ -20,7 +20,7 @@ discovery.
<p></p> <p></p>
The best way to do that is to file a security bug on our The best way to do that is to file a security bug on our
<a href="https://git.linux-kernel.at/oliver/ivatar/issues/new" <a href="https://git.linux-kernel.at/oliver/ivatar/issues/new"
title="https://git.linux-kernel.at/oliver/ivatar/issues/new"> title="https://git.linux-kernel.at/oliver/ivatar/issues/new" target="_new">
bug tracker bug tracker
</a>. Make sure you change the bug visibility (see "This issue is confidential </a>. Make sure you change the bug visibility (see "This issue is confidential
and should only be visible to team members with at least Reporter access") and and should only be visible to team members with at least Reporter access") and
@@ -45,16 +45,21 @@ ivatar/Libravatar more secure by reporting security issues to us.
<ul> <ul>
<li>Ahmed Adel Abdelfattah ( <li>Ahmed Adel Abdelfattah (
<a href="https://twitter.com/00SystemError00" <a href="https://twitter.com/00SystemError00"
title="https://twitter.com/00SystemError00">@00SystemError00</a>): title="https://twitter.com/00SystemError00" target="_new">@00SystemError00</a>):
improvement to mail configuration on <code>libravatar.org</code> and improvement to mail configuration on <code>libravatar.org</code> and
<code>libravatar.com</code></li> <code>libravatar.com</code></li>
<li> <li>
<a href="https://www.facebook.com/BugHunterID" <a href="https://www.facebook.com/BugHunterID"
title="https://www.facebook.com/BugHunterID"> title="https://www.facebook.com/BugHunterID" target="_new">
Putra Adhari</a>: Putra Adhari</a>:
<a href="https://bugs.launchpad.net/libravatar/+bug/1808720" <a href="https://bugs.launchpad.net/libravatar/+bug/1808720"
title="https://bugs.launchpad.net/libravatar/+bug/1808720"> title="https://bugs.launchpad.net/libravatar/+bug/1808720" target="_new">
server-side request forgery</a> in OpenID support</li> server-side request forgery</a> in OpenID support</li>
<li>
<a href="https://www.linkedin.com/in/naharronak/"
title="https://www.linkedin.com/in/naharronak/" target="_new">
Ronak Nahar</a>:
Spotted and reported open server status from Apache HTTPD.</li>
</ul> </ul>
<div style="height:40px"></div> <div style="height:40px"></div>