redmine - security update

Fixed packages 1

Vulnerabilities 10

• Unscored —
  CVE-2019-25026

  Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.

  redmine redmine Debian Ubuntu
  Apr 6, 2021
• Unscored —
  CVE-2020-36306

  Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.

  redmine redmine Debian Ubuntu
  Apr 6, 2021
• Unscored —
  CVE-2020-36307

  Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.

  redmine redmine Debian Ubuntu
  Apr 6, 2021
• Unscored —
  CVE-2020-36308

  Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performi…

  redmine redmine Debian Ubuntu
  Apr 6, 2021
• Unscored —
  CVE-2021-30163

  Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal…

  redmine redmine Debian Ubuntu
  Apr 6, 2021
• Unscored —
  CVE-2021-30164

  Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by le…

  redmine redmine Debian Ubuntu
  Apr 6, 2021
• Unscored —
  CVE-2021-31863

  Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x …

  redmine redmine Debian Ubuntu
  Apr 28, 2021
• Unscored —
  CVE-2021-31864

  Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the add_issue_notes permiss…

  redmine redmine Debian Ubuntu
  Apr 28, 2021
• Unscored —
  CVE-2021-31865

  Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extens…

  redmine redmine Debian Ubuntu
  Apr 28, 2021
• Unscored —
  CVE-2021-31866

  Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal authentication keys by o…

  redmine redmine Debian Ubuntu
  Apr 28, 2021