Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 21 Sep 2015 19:09:14 +0200
From: Christian Hoffmann <>
Subject: Re: CVE request: zarafa-autorespond suffers from a
 potential local privilege escalation

On 09/21/2015 06:05 PM, Christian Hoffmann wrote:
> So, for now, I don't think a new CVE should be assigned. Either Zarafa
> or me will send an update shortly.

Zarafa was quick and has updated the ChangeLog accordingly:

As expected, this issue has been assigned CVE-2015-6566.

From what I can see, no new CVE needs to be assigned here.

> On 09/21/2015 02:58 PM, Martin Prpic wrote:
>> The issue is noted as "zarafa-autorespond suffers from a potential local
>> privilege escalation" in the zarafa changelog:

Kind regards,


Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.