Debian dla-3835 : roundcube - security update

Language:

Version 1.5 Oct 28, 2024, 9:20 AM CVSS metrics ("CVSSv2 score" set to 6.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N") CVSSv2 score source (changed from "CVE-2024-37384" to "CVE-2024-37383") CVSSv3 score source (changed from "CVE-2024-37383" to none) Plugin Feed: 202410280920
Version 1.4 Oct 25, 2024, 2:35 AM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Plugin Feed: 202410250235
Version 1.3 Oct 21, 2024, 9:27 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202410210927
Version 1.2 Jul 3, 2024, 6:50 AM CVSSv3 score source (set to "CVE-2024-37383") Plugin Feed: 202407030650
Version 1.1 Jun 17, 2024, 11:03 PM New Plugin Feed: 202406172303

* Changelogs are generally available for changes made after Nov 1, 2022