Friday, April 28, 2017

CVS: cvs.openbsd.org: ports

CVSROOT: /cvs
Module name: ports
Changes by: sthen@cvs.openbsd.org 2017/04/28 15:52:17

Modified files:
mail/roundcubemail: Tag: OPENBSD_6_1 Makefile distinfo

Log message:
MFC security update to roundcubemail-1.2.5

"The updates primarily fix a recently discovered vulnerability in the
virtualmin and sasl drivers of the password plugin (CVE-2017-8114).
More details about this vulnerability will be published soon by the
reporter. Security-wise the update is therefore only relevant for those
installations of Roundcube using the password plugin with either one of
these drivers."

No comments:

Post a Comment