[DRE-maint] Bug#1140483: closed by Debian FTP Masters <ftpmaster at ftp-master.debian.org> (reply to Soren Stoutner <soren at debian.org>) (Bug#1140483: fixed in redmine 6.1.3+ds-1)

[Salvatore Bonaccorso]

Hi,

On Fri, Aug 07, 2026 at 02:35:03AM +0000, Debian Bug Tracking System wrote:
>    [ Soren Stoutner ]
>    * New upstream version (closes: #1140483 - CVE-2026-1836).

Is there more information on the fix? Can you point us to it? The
original tracking only hat the incibe.es posting:
https://www.incibe.es/en/incibe-cert/notices/aviso/stored-credentials-redmine
which unfortunately is bit light on details apart only saying which
version is fixed.

Regards,
Salvatore