Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 38da8296 by Salvatore Bonaccorso at 2020-04-30T05:41:51+02:00 Add two new roundcube issues - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,14 @@ +CVE-2020-XXXX [CSRF attack can cause an authenticated user to be logged out] + - roundcube 1.4.4+dfsg.1-1 (bug #959142) + NOTE: https://github.com/roundcube/roundcubemail/pull/7302 + NOTE: 1.4.x: https://github.com/roundcube/roundcubemail/commit/9bbda422ff0b782b81de59c86994f1a5fd93f8e6 + NOTE: 1.3.x: https://github.com/roundcube/roundcubemail/commit/1e7bec9cb868fa32b05acf6b0a557a6311350c56 + NOTE: 1.2.x: https://github.com/roundcube/roundcubemail/commit/cceeff2472c00acb2c6b96c9df7a289f1db77713 +CVE-2020-XXXX [Cross-Site Scripting (XSS) vulnerability via malicious HTML messages] + - roundcube 1.4.4+dfsg.1-1 (bug #959140) + NOTE: 1.4.x: https://github.com/roundcube/roundcubemail/commit/87e4cd0cf2c550e77586860b94e5c75d2b7686d0 + NOTE: 1.3.x: https://github.com/roundcube/roundcubemail/commit/23c06159ae8c6f500336e3075820e648aa6f40a4 + NOTE: 1.2.x: https://github.com/roundcube/roundcubemail/commit/4312dc4efecb9553fcacfab0ab9d9ee6e88477e7 CVE-2020-12466 RESERVED CVE-2020-12465 (An array overflow was discovered in mt76_add_fragment in drivers/net/w ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38da82965dacc3fe4ba8dba741f36f34a5f03c36 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38da82965dacc3fe4ba8dba741f36f34a5f03c36 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
