Summary: | <www-apps/redmine-4.1.4: Multiple vulnerabilities (CVE-2021-{31863,31864,31865,31866}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Sam James <sam> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | trivial | CC: | azamat.hackimov, m1027, proth+gentoobugs, proxy-maint, rossi.f |
Priority: | Normal | Keywords: | PullRequest |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
See Also: | https://github.com/gentoo/gentoo/pull/22429 | ||
Whiteboard: | ~3 [noglsa] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 787533, 787539 | ||
Bug Blocks: |
Description
Sam James
![]() ![]() ![]() ![]() I need rails 5.2.5 and roadie-rails 2.2.0 for version bump, please fix #787533 and #787539 issues. While waiting for the Ruby Team to fix #787533, would upgrading to 4.1.3 first be viable? Maybe not ideal, but it's out now for 2.5 months... Package list is empty or all packages have requested keywords. Package list is empty or all packages have requested keywords. Package list is empty or all packages have requested keywords. Package list is empty or all packages have requested keywords. Package list is empty or all packages have requested keywords. Package list is empty or all packages have requested keywords. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9e3cd037131f18b31af0ac8b32aa59816d35b27c commit 9e3cd037131f18b31af0ac8b32aa59816d35b27c Author: Azamat H. Hackimov <azamat.hackimov@gmail.com> AuthorDate: 2021-09-28 10:59:51 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2021-09-28 20:51:43 +0000 www-apps/redmine: remove old vulnerable version Bug: https://bugs.gentoo.org/786561 Bug: https://bugs.gentoo.org/806842 Package-Manager: Portage-3.0.20, Repoman-3.0.3 Signed-off-by: Azamat H. Hackimov <azamat.hackimov@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/22429 Signed-off-by: Sam James <sam@gentoo.org> www-apps/redmine/Manifest | 1 - www-apps/redmine/redmine-4.1.2.ebuild | 231 ---------------------------------- 2 files changed, 232 deletions(-) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2bc877fbfd8ccad198fce3c2a0cdea16decdf94f commit 2bc877fbfd8ccad198fce3c2a0cdea16decdf94f Author: Azamat H. Hackimov <azamat.hackimov@gmail.com> AuthorDate: 2021-09-28 08:44:59 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2021-09-28 20:51:39 +0000 www-apps/redmine: update to 4.1.4 Fixes security issues CVE-2021-31866, CVE-2021-31865, CVE-2021-31864, CVE-2021-31863 Bug: https://bugs.gentoo.org/786561 Package-Manager: Portage-3.0.20, Repoman-3.0.3 Signed-off-by: Azamat H. Hackimov <azamat.hackimov@gmail.com> Signed-off-by: Sam James <sam@gentoo.org> www-apps/redmine/Manifest | 1 + www-apps/redmine/redmine-4.1.4.ebuild | 233 ++++++++++++++++++++++++++++++++++ 2 files changed, 234 insertions(+) Thank you! |