Date: Sat, 16 Sep 2023 10:25:02 GMT From: Bernard Spil <brnrd@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 09190d4a5713 - main - security/vuxml: Document Roundcube XSS vuln Message-ID: <202309161025.38GAP2jE016266@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by brnrd: URL: https://cgit.FreeBSD.org/ports/commit/?id=09190d4a57139890fe3e28d63c9ee5b774168307 commit 09190d4a57139890fe3e28d63c9ee5b774168307 Author: Bernard Spil <brnrd@FreeBSD.org> AuthorDate: 2023-09-16 10:24:59 +0000 Commit: Bernard Spil <brnrd@FreeBSD.org> CommitDate: 2023-09-16 10:24:59 +0000 security/vuxml: Document Roundcube XSS vuln --- security/vuxml/vuln/2023.xml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index eb3c8fd68d81..c3b1509b15e5 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,29 @@ + <vuln vid="b5508c08-547a-11ee-85eb-84a93843eb75"> + <topic>Roundcube -- XSS vulnerability</topic> + <affects> + <package> + <name>roundcube</name> + <range><lt>1.6.3,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The Roundcube webmail project reports:</p> + <blockquote cite="https://roundcube.net/news/2023/09/15/security-update-1.6.3-released">; + <p>cross-site scripting (XSS) vulnerability in handling of + linkrefs in plain text messages</p> + </blockquote> + </body> + </description> + <references> + <url>https://roundcube.net/news/2023/09/15/security-update-1.6.3-released</url>; + </references> + <dates> + <discovery>2023-09-15</discovery> + <entry>2023-09-16</entry> + </dates> + </vuln> + <vuln vid="773ce35b-eabb-47e0-98ca-669b2b98107a"> <topic>electron{24,25} -- multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202309161025.38GAP2jE016266>