Tickets :: Comment on [#14857] Multiple XSS security vulnerabilities

* Your Email Address
* Spam protection	Enter the letters below: . .__ .___.._. . \| [__) _/ \| \| \|___[__)./__._\|_\__\|
Comment	>>> These are all fixed, and released in >>> >>> horde/base >>> horde/Core >>> horde/Kronolith >>> >>> A release of the groupware bundles will be forthcoming. >> >> Thank you very much for fixing these issues. Would it be possible to >> document which commit fixed a specific CVE? That would allow me and >> others to easily reference the patches. > > Ah, right: > > CVE-2017-16906: > https://github.com/horde/kronolith/commit/09d90141292f9ec516a7a2007bf828ce2bbdf60d > CVE-2017-16907: > https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230 > and > https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230 > CVE-2017-16908: > https://github.com/horde/kronolith/commit/39f740068ad21618f6f70b6e37855c61cadbd716 > > ...and now as I'm doing this, I see that the last CVE referenced in > your original report wasn't talked about on that blog page, so I > missed it. Let me review that one to see if it's still pertinent or > not.... >
Attachment
Watch this ticket