Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 6d3fac4c by security tracker role at 2020-05-04T08:10:16+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,23 @@ +CVE-2020-12636 + RESERVED +CVE-2020-12635 + RESERVED +CVE-2020-12634 + RESERVED +CVE-2020-12633 + RESERVED +CVE-2020-12632 + RESERVED +CVE-2020-12631 + RESERVED +CVE-2020-12630 + RESERVED +CVE-2020-12629 + RESERVED +CVE-2020-12628 + RESERVED +CVE-2020-12627 (Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j ...) + TODO: check CVE-2020-12624 (The League application before 2020-05-02 on Android sends a bearer tok ...) TODO: check CVE-2020-12623 @@ -318,13 +338,13 @@ CVE-2019-20793 RESERVED CVE-2016-11061 (Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 7 ...) NOT-FOR-US: Xerox -CVE-2020-12626 [CSRF attack can cause an authenticated user to be logged out] +CVE-2020-12626 (An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF atta ...) - roundcube 1.4.4+dfsg.1-1 (bug #959142) NOTE: https://github.com/roundcube/roundcubemail/pull/7302 NOTE: 1.4.x: https://github.com/roundcube/roundcubemail/commit/9bbda422ff0b782b81de59c86994f1a5fd93f8e6 NOTE: 1.3.x: https://github.com/roundcube/roundcubemail/commit/1e7bec9cb868fa32b05acf6b0a557a6311350c56 NOTE: 1.2.x: https://github.com/roundcube/roundcubemail/commit/cceeff2472c00acb2c6b96c9df7a289f1db77713 -CVE-2020-12625 [Cross-Site Scripting (XSS) vulnerability via malicious HTML messages] +CVE-2020-12625 (An issue was discovered in Roundcube Webmail before 1.4.4. There is a ...) - roundcube 1.4.4+dfsg.1-1 (bug #959140) NOTE: 1.4.x: https://github.com/roundcube/roundcubemail/commit/87e4cd0cf2c550e77586860b94e5c75d2b7686d0 NOTE: 1.3.x: https://github.com/roundcube/roundcubemail/commit/23c06159ae8c6f500336e3075820e648aa6f40a4 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d3fac4c70e47ce9374fc070a2c8361b27508668 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d3fac4c70e47ce9374fc070a2c8361b27508668 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits