FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

redmine -- multiple vulnerabilities

Affected packages
		redmine	<	1.0.5

Details

VuXML ID	584c506d-0e98-11e0-b59b-0050569b2d21
Discovery	2010-12-23
Entry	2010-12-23

Jean-Philippe Lang reports:

This release also fixes 3 security issues reported by joernchen of Phenoelit:

logged in users may be able to access private data (affected versions: 1.0.x)

persistent XSS vulnerability in textile formatter (affected versions: all previous releases)

remote command execution in bazaar repository adapter (affected versions: 0.9.x, 1.0.x)

[source]

References

URL	http://www.redmine.org/news/49