Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2aec5129 by Salvatore Bonaccorso at 2021-04-06T22:22:23+02:00
Add new redmine issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -29,9 +29,11 @@ CVE-2021-30166
CVE-2021-30165
RESERVED
CVE-2021-30164 (Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers
to bypass ...)
- TODO: check
+ - redmine <unfixed>
+ TODO: check fixing commit, fixed in 4.0.8
CVE-2021-30163 (Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers
to discov ...)
- TODO: check
+ - redmine <unfixed>
+ TODO: check fixing commit, fixed in 4.0.8
CVE-2021-30162 (An issue was discovered on LG mobile devices with Android OS
4.4 throu ...)
NOT-FOR-US: LG mobile devices
CVE-2021-30161 (An issue was discovered on LG mobile devices with Android OS
11 softwa ...)
@@ -55,13 +57,17 @@ CVE-2021-23158
CVE-2020-36309 (ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in
OpenResty ...)
TODO: check
CVE-2020-36308 (Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers
to discov ...)
- TODO: check
+ - redmine 4.0.7-1
+ TODO: check fixing commit, fixed in 4.0.7
CVE-2020-36307 (Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via
textile ...)
- TODO: check
+ - redmine 4.0.7-1
+ TODO: check fixing commit, fixed in 4.0.7
CVE-2020-36306 (Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the
back_url f ...)
- TODO: check
+ - redmine 4.0.7-1
+ TODO: check fixing commit, fixed in 4.0.7
CVE-2019-25026 (Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup
data duri ...)
- TODO: check
+ - redmine 4.0.6-1
+ TODO: check fixing commit, fixed in 4.0.6
CVE-2021-30160
RESERVED
CVE-2021-30159
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aec51292b89493873214092d0c056ec874a391c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aec51292b89493873214092d0c056ec874a391c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
