Accepted otrs2 6.0.30-1~bpo10+1 (source) into buster-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 15 Oct 2020 11:56:34 +0200
Source: otrs2
Architecture: source
Version: 6.0.30-1~bpo10+1
Distribution: buster-backports
Urgency: high
Maintainer: Patrick Matthäi <pmatthaei@debian.org>
Changed-By: Patrick Matthäi <pmatthaei@debian.org>
Changes:
otrs2 (6.0.30-1~bpo10+1) buster-backports; urgency=medium
.
* Rebuild for buster-backports.
.
otrs2 (6.0.30-1) unstable; urgency=high
.
* New upstream release.
- Fixes CVE-2020-11023 and CVE-2020-11022, also known as OSA-2020-14: OTRS
uses jquery version 3.4.1, which is vulnerable to cross-site scripting
(XSS).
* Adjust lintian overrides.
.
otrs2 (6.0.29-1) unstable; urgency=high
.
* New upstream release.
- Fixes CVE-2020-1776, also known as OSA-2020-13: When an agent user is
renamed or set to invalid the session belonging to the user is kept
active. The session can not be used to access ticket data in the case the
agent is invalid.
* Add missing dependency on libmoo-perl.
* Adjust many lintian overrides.
* Replace shebangs with /usr/bin/perl.
* Don't install examples anymore.
Checksums-Sha1:
04298fb501541e972b550a439eda6c3526c12fb4 1849 otrs2_6.0.30-1~bpo10+1.dsc
c4513fba52abb3628c13cab356096166af5c51eb 25973355 otrs2_6.0.30.orig.tar.bz2
564b0499d7f956a608b8a836354bc4e2214ef809 31192 otrs2_6.0.30-1~bpo10+1.debian.tar.xz
b4bec9ff8c2a0a185956278681e66acb1dbc3f82 6049 otrs2_6.0.30-1~bpo10+1_source.buildinfo
Checksums-Sha256:
1ad48f2de0b93e36182ed65efad71c045ca692d6e4ebba107c42320aef96e2c3 1849 otrs2_6.0.30-1~bpo10+1.dsc
0401e2cb03b927b22b62225b5976e512f0c4d3072bf89e6bf396b4d3e54bff82 25973355 otrs2_6.0.30.orig.tar.bz2
681a174820eec295e3ad6096c07efd57a5002b2f3a90915705ac9f74edf3e5fb 31192 otrs2_6.0.30-1~bpo10+1.debian.tar.xz
a976901764c516bca0a726e317bf15999f9648ead168f6a752abd3008774c034 6049 otrs2_6.0.30-1~bpo10+1_source.buildinfo
Files:
9fce7422c268aaea2b0d43a78e43935f 1849 non-free/web optional otrs2_6.0.30-1~bpo10+1.dsc
5b06318d31a1cb2727d4e60ab7322ef9 25973355 non-free/web optional otrs2_6.0.30.orig.tar.bz2
d4e687c70fe7cdd6ac5d79022dd37073 31192 non-free/web optional otrs2_6.0.30-1~bpo10+1.debian.tar.xz
8f7adfabf6d6a39c4dd74b9c7e60c9a8 6049 non-free/web optional otrs2_6.0.30-1~bpo10+1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=JIzW
-----END PGP SIGNATURE-----
Reply to: