[Tickets #15114] Re: Virtual Addressbook broken by CVE-2022-30287

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/15114
------------------------------------------------------------------------------
  Ticket             | 15114
  Updated By         | Git Commit <commits at lists.horde.org>
  Summary            | Virtual Addressbook broken by CVE-2022-30287
  Queue              | Turba
  Version            | 4.2.28
  Type               | Bug
  State              | Unconfirmed
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Git Commit <commits at lists.horde.org> (2022-06-18 21:24) wrote:

Changes have been made in Git (FRAMEWORK_5_2):

commit 4adb2b662887d87b98c0ea28c8033957d3cd6d56
Author: Michael J Rubinsky <mrubinsk at horde.org>
Date:   Sat, 18 Jun 2022 17:24:45 -0400

Bug: 15114 Fix regression is accessing virtual address books.

  M lib/Factory/Driver.php

https://github.com/horde/turba/commit/4adb2b662887d87b98c0ea28c8033957d3cd6d56