Skip to content
OpenAdvisories
Medium DSA-3502-1 1 CVE

roundup - security update

Published Mar 3, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 7 roundup 1.4.20-1.1+deb7u1
Debian · 8 roundup 1.4.20-1.1+deb8u1

Vulnerabilities 1

  • Medium 4.3
    CVE-2014-6276

    Roundup sensitive data disclosure vulnerability

    schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.

    roundup roundup Ubuntu PyPI