UbuntuUpdates.org

Package "redmine-sqlite"

Name: redmine-sqlite

Description:

metapackage providing sqlite dependencies for Redmine
Latest version: 3.4.4-1ubuntu0.1
Release: bionic (18.04)
Level: security
Repository: universe
Head package: redmine
Homepage: https://www.redmine.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "redmine-sqlite"

All arch deb package
APT INSTALL

Other versions of "redmine-sqlite" in Bionic

Repository Area Version
base universe 3.4.4-1
updates universe 3.4.4-1ubuntu0.1

Changelog

Version: 3.4.4-1ubuntu0.1 2019-11-26 00:06:20 UTC

  redmine (3.4.4-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: persistent XSS exists due to textile formatting
    - debian/patches/0020-Fix-CVE-2019-17427.patch: improve the way
      that html tags are identified to be escaped. (LP: #1853063)
    - CVE-2019-17427
    - https://www.cvedetails.com/cve/CVE-2019-17427/
    - Redmine Defect #31520

 -- Paulo Flabiano Smorigo <email address hidden> Mon, 25 Nov 2019 20:17:10 +0000
1853063 SQL injection and Persistent XSS in textile formatting
CVE-2019-17427 In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.


About   -   Send Feedback to @ubuntu_updates