Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 048730f2 by Salvatore Bonaccorso at 2025-12-14T12:33:01+01:00 Add two new roundcube issues - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,9 @@ +CVE-2025-XXXX [Cross-Site-Scripting vulnerability via SVG's animate tag] + - roundcube <unfixed> (bug #1122899) + NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/bfa032631c36b900e7444dfa278340b33cbf7cdb (1.6.12) +CVE-2025-XXXX [Information Disclosure vulnerability in the HTML style sanitizer] + - roundcube <unfixed> (bug #1122899) + NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/08de250fba731b634bed188bbe18d2f6ef3c7571 (1.6.12) CVE-2025-14650 (A flaw has been found in itsourcecode Online Cake Ordering System 1.0. ...) NOT-FOR-US: itsourcecode System CVE-2025-14649 (A vulnerability was detected in itsourcecode Online Cake Ordering Syst ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/048730f24cb214d6e92f3665346034e9de0b0641 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/048730f24cb214d6e92f3665346034e9de0b0641 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
