Author: fgeek-guest Date: 2012-08-20 16:43:33 +0000 (Mon, 20 Aug 2012) New Revision: 19994 Modified: data/CVE/list Log: roundcube issues got CVEs Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-08-20 13:22:29 UTC (rev 19993) +++ data/CVE/list 2012-08-20 16:43:33 UTC (rev 19994) @@ -1,11 +1,3 @@ -CVE-2012-XXXX [SA50212: roundcube 0.8 XSS] - - roundcube <not-affected> (only affects rc versions of 0.8) - NOTE: CVE request http://www.openwall.com/lists/oss-security/2012/08/20/2 - NOTE: http://trac.roundcube.net/ticket/1488519 -CVE-2012-XXXX [SA50279: roundcube multiple XSS] - - roundcube <unfixed> - NOTE: CVE request http://www.openwall.com/lists/oss-security/2012/08/20/2 - NOTE: http://trac.roundcube.net/ticket/1488613 CVE-2012-XXXX [geshi XSS in contrib/langwiz.php] - geshi <unfixed> (bug #685323) [squeeze] - geshi <no-dsa> (shipped as example/.gz) @@ -1802,10 +1794,14 @@ RESERVED CVE-2012-3509 RESERVED -CVE-2012-3508 - RESERVED -CVE-2012-3507 - RESERVED +CVE-2012-3508 [SA50279: roundcube multiple XSS] + - roundcube <unfixed> + NOTE: CVE request http://www.openwall.com/lists/oss-security/2012/08/20/2 + NOTE: http://trac.roundcube.net/ticket/1488613 +CVE-2012-3507 [SA50212: roundcube 0.8 XSS] + - roundcube <not-affected> (only affects rc versions of 0.8) + NOTE: CVE request http://www.openwall.com/lists/oss-security/2012/08/20/2 + NOTE: http://trac.roundcube.net/ticket/1488519 CVE-2012-3506 RESERVED CVE-2012-3505 [tinyproxy DoS]