[Git][security-tracker-team/security-tracker][master] new roundcube issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a2edac85 by Moritz Muehlenhoff at 2025-06-02T08:55:14+02:00
new roundcube issue

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2025-XXXX [Post-Auth RCE via PHP Object Deserialization]
+	- roundcube 1.6.11+dfsg-1 (bug #1107073)
+	NOTE: https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10
+	NOTE: https://github.com/roundcube/roundcubemail/commit/0376f69e958a8fef7f6f09e352c541b4e7729c4d (v1.6.11)
 CVE-2025-5406 (A vulnerability, which was classified as critical, was found in chaita ...)
 	NOT-FOR-US: chaitak-gorai Blogbook
 CVE-2025-5405 (A vulnerability, which was classified as problematic, has been found i ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -57,6 +57,8 @@ python-tornado
 --
 ring
 --
+roundcube
+--
 ruby-rack
 --
 ruby-saml



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2edac85828c5a7f3887a39170c60e4c34d63056

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2edac85828c5a7f3887a39170c60e4c34d63056
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250602/5dd48238/attachment.htm>