567834 – (CVE-2015-8477) www-apps/redmine: cross-site scripting vulnerability

Bug 567834 (CVE-2015-8477) - www-apps/redmine: cross-site scripting vulnerability

Summary: www-apps/redmine: cross-site scripting vulnerability

Status:	RESOLVED FIXED

Alias:	CVE-2015-8477

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal trivial (vote)
Assignee:	Gentoo Security

URL:	http://www.openwall.com/lists/oss-sec...
Whiteboard:	~4 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2015-12-09 11:08 UTC by Agostino Sarubbo
Modified:	2016-01-23 13:16 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2015-12-09 11:08:38 UTC

From ${URL} :

Please assign a CVE identifier for cross-site scripting vulnerability fixed in
Redmine versions 3.0.0 and 2.6.2 (2015-02-19).

https://www.redmine.org/issues/19117
http://www.redmine.org/projects/redmine/wiki/Security_Advisories




@maintainer(s): since the package or the affected version has never been marked as stable, we don't need to stabilize it. After the bump, please remove the affected versions from the tree.

Comment 1 Manuel Rüger (RETIRED) gentoo-dev

2016-01-17 16:46:30 UTC

Version 2.6.9 added.

Comment 2 Manuel Rüger (RETIRED) gentoo-dev

2016-01-23 13:16:17 UTC

Vulnerable version removed. Closing as NOGLSA.