[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <560039BA.50907@hoffie.info>
Date: Mon, 21 Sep 2015 19:09:14 +0200
From: Christian Hoffmann <christian@...fie.info>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: zarafa-autorespond suffers from a
potential local privilege escalation
On 09/21/2015 06:05 PM, Christian Hoffmann wrote:
> So, for now, I don't think a new CVE should be assigned. Either Zarafa
> or me will send an update shortly.
Zarafa was quick and has updated the ChangeLog accordingly:
https://download.zarafa.com/community/beta/7.2/changelog-7.2.txt
As expected, this issue has been assigned CVE-2015-6566.
From what I can see, no new CVE needs to be assigned here.
> On 09/21/2015 02:58 PM, Martin Prpic wrote:
>> https://bugzilla.redhat.com/show_bug.cgi?id=1263006
>>
>> The issue is noted as "zarafa-autorespond suffers from a potential local
>> privilege escalation" in the zarafa changelog:
Kind regards,
Christian
Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
