Debian: DSA-3030-1: mantis security update

Date20 Sep 2014

Posted ByLinuxSecurity Advisories

Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system. For the stable distribution (wheezy), these problems have been fixed in

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3030-1                   This email address is being protected from spambots. You need JavaScript enabled to view it.
http://www.debian.org/security/                        Moritz Muehlenhoff
September 20, 2014                     http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : mantis
CVE ID         : CVE-2014-1608 CVE-2014-1609

Multiple SQL injection vulnerabilities have been discovered in the Mantis
bug tracking system.

For the stable distribution (wheezy), these problems have been fixed in
version 1.2.11-1.2+deb7u1.

We recommend that you upgrade your mantis packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.