[Bug 982003] New: VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

newer
[Bug 1011922] New: AArch64:...

bugzilla_noreply＠novell.com

27 May 2016 27 May '16

12:23

http://bugzilla.suse.com/show_bug.cgi?id=982003 Bug ID: 982003 Summary: VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: nix@opensuse.org Reporter: abergmann@suse.com QA Contact: qa-bugs@suse.de CC: aj@ajaissle.de, lrupp@suse.com, wolfgang@rosenauer.org Found By: Security Response Team Blocker: --- rh#1339654 A 1.2.0 release of roundcubemail fixed an XSS vulnerability in href attribute on area tag. External references: https://github.com/roundcube/roundcubemail/issues/5240 Upstream fix: https://github.com/roundcube/roundcubemail/pull/5241 CVE assignment: http://seclists.org/oss-sec/2016/q2/414 References: https://bugzilla.redhat.com/show_bug.cgi?id=1339654 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5103 http://seclists.org/oss-sec/2016/q2/414 -- You are receiving this mail because: You are on the CC list for the bug.

Attachments:

attachment.htm (text/html — 3.1 KB)

Show replies by date

bugzilla_noreply＠novell.com

27 May 27 May

12:24

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 Alexander Bergmann changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |abergmann@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

30 Nov 30 Nov

12:18

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 http://bugzilla.suse.com/show_bug.cgi?id=982003#c4 Johannes Segitz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsegitz@novell.com Assignee|aj@ajaissle.de |security-team@suse.de Flags|needinfo?(security-team@sus | |e.de) | --- Comment #4 from Johannes Segitz --- thanks for the submits. No need to needinfo us, we see the submits in our incoming queue. Just assign the bug to us once your done here -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:14

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:5973:important -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

21:00

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 http://bugzilla.suse.com/show_bug.cgi?id=982003#c5 --- Comment #5 from Bernhard Wiedemann --- This is an autogenerated message for OBS integration: This bug (982003) was mentioned in https://build.opensuse.org/request/show/442941 13.1 / roundcubemail -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

23:14

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:5973:important | -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

1 Dec 1 Dec

17:15

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:5987:important | |obs:running:5986:important -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

7 Dec 7 Dec

11:14

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:5987:important | |obs:running:5986:important | -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:07

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 http://bugzilla.suse.com/show_bug.cgi?id=982003#c6 --- Comment #6 from Swamp Workflow Management --- openSUSE-SU-2016:3032-1: An update that solves one vulnerability and has two fixes is now available. Category: security (important) Bug References: 1001856,1012493,982003 CVE References: CVE-2016-5103 Sources used: openSUSE 13.2 (src): roundcubemail-1.0.9-23.1 -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:12

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 http://bugzilla.suse.com/show_bug.cgi?id=982003#c7 --- Comment #7 from Swamp Workflow Management --- openSUSE-SU-2016:3038-1: An update that solves two vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1001856,1012493,976988,982003 CVE References: CVE-2015-2181,CVE-2016-5103 Sources used: openSUSE Leap 42.2 (src): roundcubemail-1.1.7-15.1 openSUSE Leap 42.1 (src): roundcubemail-1.1.7-15.1 -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

9 Dec 9 Dec

08:01

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 http://bugzilla.suse.com/show_bug.cgi?id=982003#c8 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #8 from Marcus Meissner --- re;leased -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

23 Dec 23 Dec

11:35

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 http://bugzilla.suse.com/show_bug.cgi?id=982003#c9 Aeneas Jaißle changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com --- Comment #9 from Aeneas Jaißle --- *** Bug 1016744 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

31 Dec 31 Dec

02:07

New subject: [Bug 982003] VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

http://bugzilla.suse.com/show_bug.cgi?id=982003 http://bugzilla.suse.com/show_bug.cgi?id=982003#c11 --- Comment #11 from Swamp Workflow Management --- openSUSE-SU-2016:3309-1: An update that solves one vulnerability and has two fixes is now available. Category: security (important) Bug References: 1001856,1012493,982003 CVE References: CVE-2016-5103 Sources used: openSUSE 13.1 (src): roundcubemail-1.0.9-2.36.1 -- You are receiving this mail because: You are on the CC list for the bug.

2679

Age (days ago)

2897

Last active (days ago)

List overview

Download

12 comments

1 participants

participants (1)

bugzilla_noreply＠novell.com

[Bug 982003] New: VUL-0: CVE-2016-5103: roundcube: XSS vulnerability in mail content page

tags

participants (1)