Sebastien Delafond pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0f7378b5 by Sébastien Delafond at 2020-05-04T07:35:07+02:00
Add newly assigned CVEs for roundcube issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -318,13 +318,13 @@ CVE-2019-20793
RESERVED
CVE-2016-11061 (Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655,
6655i, 7 ...)
NOT-FOR-US: Xerox
-CVE-2020-XXXX [CSRF attack can cause an authenticated user to be logged out]
+CVE-2020-12626 [CSRF attack can cause an authenticated user to be logged out]
- roundcube 1.4.4+dfsg.1-1 (bug #959142)
NOTE: https://github.com/roundcube/roundcubemail/pull/7302
NOTE: 1.4.x:
https://github.com/roundcube/roundcubemail/commit/9bbda422ff0b782b81de59c86994f1a5fd93f8e6
NOTE: 1.3.x:
https://github.com/roundcube/roundcubemail/commit/1e7bec9cb868fa32b05acf6b0a557a6311350c56
NOTE: 1.2.x:
https://github.com/roundcube/roundcubemail/commit/cceeff2472c00acb2c6b96c9df7a289f1db77713
-CVE-2020-XXXX [Cross-Site Scripting (XSS) vulnerability via malicious HTML
messages]
+CVE-2020-12625 [Cross-Site Scripting (XSS) vulnerability via malicious HTML
messages]
- roundcube 1.4.4+dfsg.1-1 (bug #959140)
NOTE: 1.4.x:
https://github.com/roundcube/roundcubemail/commit/87e4cd0cf2c550e77586860b94e5c75d2b7686d0
NOTE: 1.3.x:
https://github.com/roundcube/roundcubemail/commit/23c06159ae8c6f500336e3075820e648aa6f40a4
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f7378b5d1106c210019340ed60926bc18cab586
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f7378b5d1106c210019340ed60926bc18cab586
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
