Your message dated Sun, 07 Oct 2018 21:06:43 +0000
with message-id <[email protected]>
and subject line Bug#909800: fixed in php-horde-core 2.31.3+debian0-1
has caused the Debian Bug report #909800,
regarding php-horde-core: CVE-2017-16907 XSS via Color field
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
909800: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909800
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: php-horde
X-Debbugs-CC: [email protected]
Severity: grave
Tags: security
Hi,
The following vulnerability was published for php-horde.
CVE-2017-16907[0]:
| In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field
| in a Create Task List action.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2017-16907
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16907
Please adjust the affected versions in the BTS as needed.
Regards,
Markus
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: php-horde-core
Source-Version: 2.31.3+debian0-1
We believe that the bug you reported is fixed in the latest version of
php-horde-core, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mathieu Parent <[email protected]> (supplier of updated php-horde-core package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 07 Oct 2018 22:35:41 +0200
Source: php-horde-core
Binary: php-horde-core
Architecture: source all
Version: 2.31.3+debian0-1
Distribution: unstable
Urgency: medium
Maintainer: Horde Maintainers <[email protected]>
Changed-By: Mathieu Parent <[email protected]>
Description:
php-horde-core -
Closes: 909800
Changes:
php-horde-core (2.31.3+debian0-1) unstable; urgency=medium
.
* New upstream version 2.31.3+debian0
* Fix CVE-2017-16907 XSS via Color field (Closes: #909800)
Checksums-Sha1:
445ad3a6129627c56ca6a60506abbef7f890afab 2174
php-horde-core_2.31.3+debian0-1.dsc
b9419360c566dd8d02435a7cbfb287f35aca9d9e 1547379
php-horde-core_2.31.3+debian0.orig.tar.gz
9cd7492ddf027f59d464af5860da4da3812a5d30 23684
php-horde-core_2.31.3+debian0-1.debian.tar.xz
69b1b10a12eb7f6885fe544e933036a61e8e13bd 1151684
php-horde-core_2.31.3+debian0-1_all.deb
67c488d2b013bccaa2880df875773bb60512a93d 6253
php-horde-core_2.31.3+debian0-1_amd64.buildinfo
Checksums-Sha256:
171f77687f31dbecfefa62fea2d218498745809922d8e2db9897ee589eed53da 2174
php-horde-core_2.31.3+debian0-1.dsc
4162b2d83a30102ee3bad1677c7973aa762ab06b41506950d62b49fe6b431e8b 1547379
php-horde-core_2.31.3+debian0.orig.tar.gz
cc687dd78fd2234dfd6bade36a1b094f19a4daa54c4dfce508786e38cb89b434 23684
php-horde-core_2.31.3+debian0-1.debian.tar.xz
8f5cc45822f47c7c29c16b432f5d72273ebd8cb003d224a00c3b8d8ccbc40112 1151684
php-horde-core_2.31.3+debian0-1_all.deb
ced8ddb72a95465e29e1eaddcae9f5f1e235b3dd25d4e7d7553223b15497ce1e 6253
php-horde-core_2.31.3+debian0-1_amd64.buildinfo
Files:
8782db2eb3d63d407acee6843b573678 2174 php optional
php-horde-core_2.31.3+debian0-1.dsc
0b4e48e92d6915c26a98c7ab212b8f66 1547379 php optional
php-horde-core_2.31.3+debian0.orig.tar.gz
614c827bed6f3507c4c9c6d66479c8bb 23684 php optional
php-horde-core_2.31.3+debian0-1.debian.tar.xz
8b62eb534a3d2e8bbb017f55c9350d9d 1151684 php optional
php-horde-core_2.31.3+debian0-1_all.deb
8c2914105d4e472382837be0f823105a 6253 php optional
php-horde-core_2.31.3+debian0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=qvgd
-----END PGP SIGNATURE-----
--- End Message ---
