Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Ubuntu: USN-4200-1 Critical: Redmine XSS and SQL Injection Threats

ubuntu
Calendar Grey November 25, 2019
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-4250-1 addresses several vulnerabilities related to the kernel and their applicable patches for different versions.
Several security issues were fixed in redmine.

Summary

Topics%20covered

Topics Covered

security advisory critical software update sql injection xss ubuntu redmine

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: redmine 4.0.1-2ubuntu0.1 redmine-mysql 4.0.1-2ubuntu0.1 redmine-pgsql 4.0.1-2ubuntu0.1 redmine-sqlite 4.0.1-2ubuntu0.1 Ubuntu 18.04 LTS: redmine 3.4.4-1ubuntu0.1 redmine-mysql 3.4.4-1ubuntu0.1 redmine-pgsql 3.4.4-1ubuntu0.1 redmine-sqlite 3.4.4-1ubuntu0.1 Ubuntu 16.04 LTS: redmine 3.2.1-2ubuntu0.2 redmine-mysql 3.2.1-2ubuntu0.2 redmine-pgsql 3.2.1-2ubuntu0.2 redmine-sqlite 3.2.1-2ubuntu0.2 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4200-1

CVE-2019-17427, CVE-2019-18890

Severity
critical
Lowest
Low
Medium
High
Critical

November 26, 2019

Topics%20covered

Topics Covered

security advisory critical software update sql injection xss ubuntu redmine

Package Information

https://launchpad.net/ubuntu/+source/redmine/4.0.1-2ubuntu0.1 https://launchpad.net/ubuntu/+source/redmine/3.4.4-1ubuntu0.1 https://launchpad.net/ubuntu/+source/redmine/3.2.1-2ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here