Accepted request-tracker4 4.4.1-4 (source) into unstable

Dominic Hargreaves Thu, 15 Jun 2017 14:08:22 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 14 Jun 2017 23:55:29 +0100
Source: request-tracker4
Binary: request-tracker4 rt4-clients rt4-standalone rt4-fcgi rt4-apache2 
rt4-db-postgresql rt4-db-mysql rt4-db-sqlite rt4-doc-html
Architecture: source
Version: 4.4.1-4
Distribution: unstable
Urgency: high
Maintainer: Debian Request Tracker Group 
<pkg-request-tracker-maintain...@lists.alioth.debian.org>
Changed-By: Dominic Hargreaves <d...@earth.li>
Description:
 request-tracker4 - extensible trouble-ticket tracking system
 rt4-apache2 - Apache 2 specific files for request-tracker4
 rt4-clients - mail gateway and command-line interface to request-tracker4
 rt4-db-mysql - MySQL database backend for request-tracker4
 rt4-db-postgresql - PostgreSQL database backend for request-tracker4
 rt4-db-sqlite - SQLite database backend for request-tracker4
 rt4-doc-html - HTML documentation for request-tracker4
 rt4-fcgi   - External FastCGI support for request-tracker4
 rt4-standalone - Standalone web server support for request-tracker4
Closes: 854789 862426
Changes:
 request-tracker4 (4.4.1-4) unstable; urgency=high
 .
   * Add dependency on libhtml-gumbo-perl for better table rendering
   * Handle configuration permissions correctly following
     RT_SiteConfig.d changes (Closes: #862426)
   * Improve documentation for Apache configurations (thanks to
     Michael Howe for the text)
   * Add support for dbconfig-no-thanks opt-out (Closes: #854789)
   * Fix multiple security issues:
     - [CVE-2017-5943] CSRF verification token information leak
     - [CVE-2016-6127] XSS in file uploads
     - [CVE-2017-5361] Timing side-channel vulnerability in password
       verification
     - [CVE-2017-5944] Remote code execution in dashboard interface
     - Add check for incorrect RestrictLoginReferrer configuration setting
   * Work around a DoS vulnerability in Email::Address (CVE-2015-7686)
Checksums-Sha1:
 0cbb3336b62aa5bb310032aef7b005b7de6635ea 5476 request-tracker4_4.4.1-4.dsc
 616c6c6ab9cf0f324d2b6872c45e60972e3c69db 83876 
request-tracker4_4.4.1-4.debian.tar.xz
Checksums-Sha256:
 d7da4681069dd97d3e16c3e789594d7162a6181b567b28f030ea2c32361dba3a 5476 
request-tracker4_4.4.1-4.dsc
 efb4124bcd99375d12caa6ec26513a9cfc8b7724d3fc008c7019b433d89e247f 83876 
request-tracker4_4.4.1-4.debian.tar.xz
Files:
 db2370e39323840af44dcbba233ac7f9 5476 misc optional 
request-tracker4_4.4.1-4.dsc
 ee1e5d5d01f2c6edda9ff8b54a2c341e 83876 misc optional 
request-tracker4_4.4.1-4.debian.tar.xz
Accepted request-tracker4 4.4.1-4 (source) into unstable

Reply via email to
