[Secure-testing-commits] r51145 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-28 10:22:38 +0000 (Fri, 28 Apr 2017)
New Revision: 51145

Modified:
   data/CVE/list
Log:
Add new roundcube issue, CVE-2017-8114

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-28 09:20:55 UTC (rev 51144)
+++ data/CVE/list	2017-04-28 10:22:38 UTC (rev 51145)
@@ -401,8 +401,15 @@
 	RESERVED
 CVE-2017-8115 (Directory traversal in setup/processors/url_search.php (aka the search ...)
 	NOT-FOR-US: MODX
-CVE-2017-8114
+CVE-2017-8114 [Fix security issue in virtualmin and sasl drivers]
 	RESERVED
+	- roundcube <unfixed>
+	NOTE: https://github.com/roundcube/roundcubemail/releases/tag/1.2.5
+	NOTE: https://github.com/roundcube/roundcubemail/commit/6e054a37d13dc3772d0aa454a32d5dc3bdcc7003 (1.2.x)
+	NOTE: https://github.com/roundcube/roundcubemail/releases/tag/1.1.9
+	NOTE: https://github.com/roundcube/roundcubemail/commit/10b227d70a03e33682aaaa0138e84f9256f3cd50 (1.1.x)
+	NOTE: https://github.com/roundcube/roundcubemail/releases/tag/1.0.11
+	NOTE: https://github.com/roundcube/roundcubemail/commit/271426429bfbb5b63e6dec91b1e4780e8ef1c67e (1.0.x)
 CVE-2017-8113
 	RESERVED
 CVE-2017-8112 [vmw_pvscsi: infinite loop in pvscsi_log2]