Accepted request-tracker4 4.0.7-5+deb7u5 (all source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 11 Jun 2017 01:34:50 +0100
Source: request-tracker4
Binary: request-tracker4 rt4-clients rt4-fcgi rt4-apache2 rt4-db-postgresql rt4-db-mysql rt4-db-sqlite
Architecture: all source
Version: 4.0.7-5+deb7u5
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Request Tracker Group <pkg-request-tracker-maintainers@lists.alioth.debian.org>
Changed-By: Dominic Hargreaves <dom@earth.li>
Description:
request-tracker4 - extensible trouble-ticket tracking system
rt4-apache2 - Apache 2 specific files for request-tracker4
rt4-clients - mail gateway and command-line interface to request-tracker4
rt4-db-mysql - MySQL database backend for request-tracker4
rt4-db-postgresql - PostgreSQL database backend for request-tracker4
rt4-db-sqlite - SQLite database backend for request-tracker4
rt4-fcgi - External FastCGI support for request-tracker4
Changes:
request-tracker4 (4.0.7-5+deb7u5) wheezy-security; urgency=high
.
* Fix multiple security issues:
- [CVE-2017-5943] CSRF verification token information leak
- [CVE-2016-6127] XSS in file uploads
- [CVE-2017-5361] Timing side-channel vulnerability in password
verification
- [CVE-2017-5944] Remote code execution in dashboard interface
- Add check for incorrect RestrictLoginReferrer configuration setting
* Work around a DoS vulnerability in Email::Address (CVE-2015-7686)
Checksums-Sha1:
63bc38fd1d626e0d9d9fc5b0465a53bcf07b7d5f 2830 request-tracker4_4.0.7-5+deb7u5.dsc
9cf682f7deb3819d644e14a53aa4780157fe0495 78972 request-tracker4_4.0.7-5+deb7u5.debian.tar.xz
c317e47a4fa2d412f99e7f32e5f70cd7fab89b7f 3955282 request-tracker4_4.0.7-5+deb7u5_all.deb
662ccb194e2e899b6b8468192444d9aa7dff1633 48324 rt4-clients_4.0.7-5+deb7u5_all.deb
dd77ea91a426ec2453bc3ba8e4455fe4a8b3051f 11928 rt4-fcgi_4.0.7-5+deb7u5_all.deb
fe8fd486f252688390f3e0ceea666c650cad11d5 10852 rt4-apache2_4.0.7-5+deb7u5_all.deb
29840289bbec6f4090fab0844839c3723db74133 10020 rt4-db-postgresql_4.0.7-5+deb7u5_all.deb
80dd40faf8ea61b7f523ff9c60bb82b1c1d7469d 10016 rt4-db-mysql_4.0.7-5+deb7u5_all.deb
4bab134567041653dddd5fc9e1d92fdce536b7ab 10116 rt4-db-sqlite_4.0.7-5+deb7u5_all.deb
Checksums-Sha256:
49985c3034960ddc631de72fdb2db95e5871777472515b1a7ca7d478e1e07e0c 2830 request-tracker4_4.0.7-5+deb7u5.dsc
b350c14115f7139f904dffa84074ea968e503196f6b79b9194b341608f88684a 78972 request-tracker4_4.0.7-5+deb7u5.debian.tar.xz
dd5c7d878edf05bc5cd67710b281f5ec81195b7fb29a32ee3628feb1e7c9cd25 3955282 request-tracker4_4.0.7-5+deb7u5_all.deb
b19182dc716f34726b5e48ab384b6c9414e8ae8f8dc45caba0bcd0eba445025a 48324 rt4-clients_4.0.7-5+deb7u5_all.deb
4947d3d36895ed7e00821d61f9a282111c074ee90445c50718c2a892a0e1024f 11928 rt4-fcgi_4.0.7-5+deb7u5_all.deb
9c67e3a11435f9bc2a235d2c45cde1817998d31594b5b8616fb47de4a34c30a4 10852 rt4-apache2_4.0.7-5+deb7u5_all.deb
180cb2899b7800b739ccf1b4977084ecede72eedf3d8f766ec877877ac9ddd6f 10020 rt4-db-postgresql_4.0.7-5+deb7u5_all.deb
e85f19eaa5ebdc11cd04442a40aa46ede5f44247cfd9705fac9f4eec72c6effa 10016 rt4-db-mysql_4.0.7-5+deb7u5_all.deb
ad47cc991ceaa24e708a095b79156ec9453eda4eac7fcfa4d4c8192fceccaf97 10116 rt4-db-sqlite_4.0.7-5+deb7u5_all.deb
Files:
e1b325cb826e6cd40c32c44712d0ab4f 2830 misc optional request-tracker4_4.0.7-5+deb7u5.dsc
7e396a984325afde46cda864d2b1af02 78972 misc optional request-tracker4_4.0.7-5+deb7u5.debian.tar.xz
fedd03e24530b956868face7be5e720e 3955282 misc optional request-tracker4_4.0.7-5+deb7u5_all.deb
2eaa532beb510e2a356fc4df48f4a346 48324 misc optional rt4-clients_4.0.7-5+deb7u5_all.deb
ef293c71a99e134d6255a601578857c1 11928 misc optional rt4-fcgi_4.0.7-5+deb7u5_all.deb
b87dec6f1813ea54335796b19fbbdfa2 10852 misc optional rt4-apache2_4.0.7-5+deb7u5_all.deb
ca399f14fe0a958369ff53806b1001da 10020 misc optional rt4-db-postgresql_4.0.7-5+deb7u5_all.deb
256985e2d1bc445a1306bb191de8b692 10016 misc optional rt4-db-mysql_4.0.7-5+deb7u5_all.deb
94ce9158a289fe5c9884a2fd80f547ee 10116 misc optional rt4-db-sqlite_4.0.7-5+deb7u5_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=kiPM
-----END PGP SIGNATURE-----