[Git][security-tracker-team/security-tracker][master] Add CVE-2019-18890/redmine

Salvatore Bonaccorso carnil at debian.org
Mon Nov 18 21:19:47 GMT 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6ea02a3f by Salvatore Bonaccorso at 2019-11-18T21:19:06Z
Add CVE-2019-18890/redmine

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -485,8 +485,12 @@ CVE-2019-18892
 	RESERVED
 CVE-2019-18891
 	RESERVED
-CVE-2019-18890
+CVE-2019-18890 [SQL injection]
 	RESERVED
+	- redmine 3.4.2-1
+	NOTE: https://www.redmine.org/news/125
+	NOTE: https://www.redmine.org/projects/redmine/repository/revisions/16196
+	NOTE: https://www.redmine.org/issues/32374
 CVE-2019-18889 [Forbid serializing AbstractAdapter and TagAwareAdapter instances]
 	RESERVED
 	- symfony 4.3.8+dfsg-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6ea02a3fd1dec305ec323402b15908b008d2e582

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6ea02a3fd1dec305ec323402b15908b008d2e582
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191118/446afa66/attachment.html>


More information about the debian-security-tracker-commits mailing list