[Secure-testing-commits] r38932 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-15 06:06:55 +0000 (Fri, 15 Jan 2016)
New Revision: 38932

Modified:
   data/CVE/list
Log:
Add CVE-2015-8770/roundcube

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-15 05:26:22 UTC (rev 38931)
+++ data/CVE/list	2016-01-15 06:06:55 UTC (rev 38932)
@@ -417,8 +417,11 @@
 	RESERVED
 CVE-2016-1712
 	RESERVED
-CVE-2015-8770
+CVE-2015-8770 [remote code execution / path traversal]
 	RESERVED
+	- roundcube 1.1.4+dfsg.1-1
+	NOTE: https://roundcube.net/news/2015/12/26/updates-1.1.4-and-1.0.8-released/
+	TODO: check older versions
 CVE-2015-8769 (SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows ...)
 	TODO: check
 CVE-2016-1711