[Secure-testing-commits] r31181 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Wed Jan 7 15:16:26 UTC 2015
Author: carnil
Date: 2015-01-07 15:16:25 +0000 (Wed, 07 Jan 2015)
New Revision: 31181
Modified:
data/CVE/list
Log:
Add roundcube issue
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-01-07 13:53:59 UTC (rev 31180)
+++ data/CVE/list 2015-01-07 15:16:25 UTC (rev 31181)
@@ -1,5 +1,8 @@
CVE-2015-XXXX [saves unknown host's fingerprint in known_hosts without any prompt]
- lftp <unfixed> (bug #774769)
+CVE-2014-XXXX [possible CSRF attacks to some address book operations as well as to the ACL and Managesieve plugins]
+ - roundcube <unfixed>
+ NOTE: https://github.com/roundcube/roundcubemail/commit/376cbfd4f2dfcf455717409b70d9d056cbeb08b1
CVE-2015-0558
RESERVED
CVE-2015-0555
More information about the Secure-testing-commits
mailing list