Accepted request-tracker4 4.4.4+dfsg-3 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 01 Oct 2021 22:13:21 +0300
Source: request-tracker4
Architecture: source
Version: 4.4.4+dfsg-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Request Tracker Group <pkg-request-tracker-maintainers@lists.alioth.debian.org>
Changed-By: Niko Tyni <ntyni@debian.org>
Closes: 985141 995175
Changes:
request-tracker4 (4.4.4+dfsg-3) unstable; urgency=medium
.
[ Andrew Ruthven ]
* Specify correct branch in d/upstream/metadata
* Ensure a sane database admin user is specified (Closes: #985141)
* Apply upstream patch which fixes a security vulnerability that involves a
login timing side-channel attack. This resolves CVE-2021-38562
(Closes: #995175)
Checksums-Sha1:
89dc81e2af5393bc3c9ef5b71c1935f9739a6f91 5562 request-tracker4_4.4.4+dfsg-3.dsc
21e68a5d95610a9aa71b1f93b86427829f26d7d4 86560 request-tracker4_4.4.4+dfsg-3.debian.tar.xz
37f9f1a2a3d7014c59e29b179eec29095308633a 19047 request-tracker4_4.4.4+dfsg-3_source.buildinfo
Checksums-Sha256:
ac6c91f6361548efb05de5dd0de76e9db9bd0af7370f86813fff97b7df5e8283 5562 request-tracker4_4.4.4+dfsg-3.dsc
ae89ea94456f453e3f4f1ba92841ab25c40e4331e06a43d4702385b4e5f4e367 86560 request-tracker4_4.4.4+dfsg-3.debian.tar.xz
6da1cb4a39ad23c9748284042b7c7eb4ddef713564d365caa42a57dc6a7c76ef 19047 request-tracker4_4.4.4+dfsg-3_source.buildinfo
Files:
b88c5381147afa3d1476dbdfec07d94e 5562 misc optional request-tracker4_4.4.4+dfsg-3.dsc
dddb889861420ade20ce6e9475ed26f3 86560 misc optional request-tracker4_4.4.4+dfsg-3.debian.tar.xz
8434668b856b0d28abe52e71af8c563e 19047 misc optional request-tracker4_4.4.4+dfsg-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=z2tR
-----END PGP SIGNATURE-----