[Secure-testing-commits] r35350 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Tue Jul 7 05:04:23 UTC 2015
Author: carnil
Date: 2015-07-07 05:04:22 +0000 (Tue, 07 Jul 2015)
New Revision: 35350
Modified:
data/CVE/list
Log:
Add bug reference for roundcube issues, #791643
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-07-07 04:34:44 UTC (rev 35349)
+++ data/CVE/list 2015-07-07 05:04:22 UTC (rev 35350)
@@ -1,15 +1,15 @@
CVE-2015-5383 [potential info disclosure from temp directory]
- - roundcube <unfixed>
+ - roundcube <unfixed> (bug #791643)
NOTE: http://www.openwall.com/lists/oss-security/2015/07/06/10
NOTE: http://trac.roundcube.net/ticket/1490378
TODO: check versions, not claimed to affect 1.0.x
CVE-2015-5382 [security improvement in contact photo handling]
- - roundcube <unfixed>
+ - roundcube <unfixed> (bug #791643)
NOTE: http://www.openwall.com/lists/oss-security/2015/07/06/10
NOTE: http://trac.roundcube.net/ticket/1490379
TODO: check versions
CVE-2015-5381 [XSS vulnerability in _mbox argument]
- - roundcube <unfixed>
+ - roundcube <unfixed> (bug #791643)
NOTE: http://www.openwall.com/lists/oss-security/2015/07/06/10
NOTE: http://trac.roundcube.net/ticket/1490417
TODO: check versions, claimed to not affect 1.0.x
More information about the Secure-testing-commits
mailing list