[Secure-testing-commits] r41134 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Apr 25 05:59:57 UTC 2016


Author: carnil
Date: 2016-04-25 05:59:57 +0000 (Mon, 25 Apr 2016)
New Revision: 41134

Modified:
   data/CVE/list
Log:
Add fixed version for roundcube issue

Fixed in 1.1.0 upstream, mark with first version included in unstable as
fixed.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-25 05:54:27 UTC (rev 41133)
+++ data/CVE/list	2016-04-25 05:59:57 UTC (rev 41134)
@@ -31060,13 +31060,13 @@
 	NOT-FOR-US: ZeusCart
 CVE-2015-2181 [buffer overflows in the roundcube DBMail driver for the password plugin]
 	RESERVED
-	- roundcube <undetermined>
+	- roundcube 1.1.1+dfsg.1-2
 	NOTE: http://trac.roundcube.net/ticket/1490261
 	NOTE: http://advisories.mageia.org/MGASA-2015-0400.html
 	NOTE: http://lists.opensuse.org/opensuse-updates/2015-07/msg00032.html
 CVE-2015-2180 [execute arbitrary shell commands as root from the roundcube DBMail driver for the password plugin]
 	RESERVED
-	- roundcube <undetermined>
+	- roundcube 1.1.1+dfsg.1-2
 	NOTE: http://trac.roundcube.net/ticket/1490261
 	NOTE: http://advisories.mageia.org/MGASA-2015-0400.html
 	NOTE: http://lists.opensuse.org/opensuse-updates/2015-07/msg00032.html




More information about the Secure-testing-commits mailing list