request-tracker4 4.4.1-4 source package in Ubuntu
Changelog
request-tracker4 (4.4.1-4) unstable; urgency=high * Add dependency on libhtml-gumbo-perl for better table rendering * Handle configuration permissions correctly following RT_SiteConfig.d changes (Closes: #862426) * Improve documentation for Apache configurations (thanks to Michael Howe for the text) * Add support for dbconfig-no-thanks opt-out (Closes: #854789) * Fix multiple security issues: - [CVE-2017-5943] CSRF verification token information leak - [CVE-2016-6127] XSS in file uploads - [CVE-2017-5361] Timing side-channel vulnerability in password verification - [CVE-2017-5944] Remote code execution in dashboard interface - Add check for incorrect RestrictLoginReferrer configuration setting * Work around a DoS vulnerability in Email::Address (CVE-2015-7686) -- Dominic Hargreaves <email address hidden> Wed, 14 Jun 2017 23:55:29 +0100
Upload details
- Uploaded by:
- Debian Request Tracker Group
- Uploaded to:
- Sid
- Original maintainer:
- Debian Request Tracker Group
- Architectures:
- all
- Section:
- misc
- Urgency:
- Very Urgent
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
request-tracker4_4.4.1-4.dsc | 5.3 KiB | d7da4681069dd97d3e16c3e789594d7162a6181b567b28f030ea2c32361dba3a |
request-tracker4_4.4.1.orig-third-party-source.tar.gz | 1.1 MiB | 5cdc9d979a44ac53aa67e2ddecc17477dbe53fa8be8b4147b5f9a3b83cabdaf8 |
request-tracker4_4.4.1.orig.tar.gz | 8.6 MiB | f87329911020e01b39948070aec2bd7abf0c81641f0cf2f25e01c690a19f24f5 |
request-tracker4_4.4.1-4.debian.tar.xz | 81.9 KiB | efb4124bcd99375d12caa6ec26513a9cfc8b7724d3fc008c7019b433d89e247f |
Available diffs
- diff from 4.4.1-3 to 4.4.1-4 (7.7 KiB)
No changes file available.
Binary packages built by this source
- request-tracker4: No summary available for request-tracker4 in ubuntu artful.
No description available for request-tracker4 in ubuntu artful.
- rt4-apache2: No summary available for rt4-apache2 in ubuntu artful.
No description available for rt4-apache2 in ubuntu artful.
- rt4-clients: No summary available for rt4-clients in ubuntu artful.
No description available for rt4-clients in ubuntu artful.
- rt4-db-mysql: No summary available for rt4-db-mysql in ubuntu artful.
No description available for rt4-db-mysql in ubuntu artful.
- rt4-db-postgresql: No summary available for rt4-db-postgresql in ubuntu artful.
No description available for rt4-db-postgresql in ubuntu artful.
- rt4-db-sqlite: No summary available for rt4-db-sqlite in ubuntu artful.
No description available for rt4-db-sqlite in ubuntu artful.
- rt4-doc-html: No summary available for rt4-doc-html in ubuntu artful.
No description available for rt4-doc-html in ubuntu artful.
- rt4-fcgi: No summary available for rt4-fcgi in ubuntu artful.
No description available for rt4-fcgi in ubuntu artful.
- rt4-standalone: No summary available for rt4-standalone in ubuntu artful.
No description available for rt4-standalone in ubuntu artful.