[Git][security-tracker-team/security-tracker][master] One CVE assigned for roundcube issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8004bf5e by Salvatore Bonaccorso at 2026-10-20T10:33:52+02:00
One CVE assigned for roundcube issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -170,8 +170,6 @@ CVE-2026-113404 (WebITR developed by Uniong has a Insecure Deserialization vulne
 	TODO: check
 CVE-2026-113402 (ArmorX Spam developed by ArmorX Global Technology has a Local File Inc ...)
 	TODO: check
-CVE-2026-113386 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by ...)
-	TODO: check
 CVE-2026-113380 (In the RingRTC library before 2.72.0 for Signal, a peer that saturates ...)
 	TODO: check
 CVE-2026-112991 (The html_to_markdown expansion module in MISP Modules contains a serve ...)
@@ -530,7 +528,7 @@ CVE-2026-111879
 	NOTE: Fixed by: https://github.com/perl5-dbi/dbi/commit/99bbf2ab9d137e6f042a770bd3bbba3bc0b3a901 (1.656)
 CVE-2026-111946 (Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclo ...)
 	NOT-FOR-US: Plack::Middleware::ETag Perl module
-CVE-2026-XXXX [Fix IMAP command injection via CRLF in _uid parameter of mail/headers and mail/viewsource action]
+CVE-2026-113386 [Fix IMAP command injection via CRLF in _uid parameter of mail/headers and mail/viewsource action]
 	- roundcube 1.6.20+dfsg-1 (bug #1151279)
 	NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
 	NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/f62879defc0330ae240c72b83b2d00a8ab337447 (1.6.20)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8004bf5e7883fd9877aff2a958bfa30631e4f634

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8004bf5e7883fd9877aff2a958bfa30631e4f634
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/b6ed2fd8/attachment-0001.htm>