Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e46742be by Salvatore Bonaccorso at 2018-09-30T12:02:35Z
Track as well php-hord-eturba source package
tuba/search.php is included in the php-horde-turba source package.
Still upstream is unable to confirm the SQL injections issues and the
CVE might be invalid or disputed at least.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -38427,6 +38427,7 @@ CVE-2017-17782 (In GraphicsMagick 1.3.27a, there is a
heap-based buffer over-rea
NOTE: https://sourceforge.net/p/graphicsmagick/bugs/530/
CVE-2017-17781 (In Horde Groupware through 5.2.22, SQL Injection exists via
the group ...)
- php-horde <undetermined>
+ - php-horde-turba <undetermined>
NOTE: http://code610.blogspot.com/2017/12/modus-operandi-horde-52x.html
NOTE: https://bugs.horde.org/ticket/14857
CVE-2017-17780 (The Clockwork SMS clockwork-test-message.php component has XSS
via a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e46742be8dea35e7cbd81992124126fb2d4e0d0b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e46742be8dea35e7cbd81992124126fb2d4e0d0b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
