Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 21 Sep 2015 19:09:14 +0200
From: Christian Hoffmann <christian@...fie.info>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: zarafa-autorespond suffers from a
 potential local privilege escalation

On 09/21/2015 06:05 PM, Christian Hoffmann wrote:
> So, for now, I don't think a new CVE should be assigned. Either Zarafa
> or me will send an update shortly.

Zarafa was quick and has updated the ChangeLog accordingly:
https://download.zarafa.com/community/beta/7.2/changelog-7.2.txt

As expected, this issue has been assigned CVE-2015-6566.

From what I can see, no new CVE needs to be assigned here.

> On 09/21/2015 02:58 PM, Martin Prpic wrote:
>> https://bugzilla.redhat.com/show_bug.cgi?id=1263006
>>
>> The issue is noted as "zarafa-autorespond suffers from a potential local
>> privilege escalation" in the zarafa changelog:

Kind regards,

Christian


Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.