[Secure-testing-commits] r42444 - data/CVE

Fri Jun 10 17:42:03 UTC 2016

Author: apo
Date: 2016-06-10 17:42:03 +0000 (Fri, 10 Jun 2016)
New Revision: 42444

Modified:
   data/CVE/list
Log:
Mark CVE-2015-2180 roundcube, wheezy as not affected

The dbmail driver does not exist in this version.


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-06-10 17:29:29 UTC (rev 42443)
+++ data/CVE/list	2016-06-10 17:42:03 UTC (rev 42444)
@@ -35270,6 +35270,7 @@
 CVE-2015-2180 [execute arbitrary shell commands as root from the roundcube DBMail driver for the password plugin]
 	RESERVED
 	- roundcube 1.1.1+dfsg.1-2
+	[wheezy] - roundcube <not-affected> (dbmail driver does not exist)
 	NOTE: http://trac.roundcube.net/ticket/1490261
 	NOTE: http://advisories.mageia.org/MGASA-2015-0400.html
 	NOTE: http://lists.opensuse.org/opensuse-updates/2015-07/msg00032.html


