Accepted otrs2 6.0.32-5~bpo10+1 (source) into buster-backports->backports-policy, buster-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 23 Jun 2021 13:43:44 +0200
Source: otrs2
Architecture: source
Version: 6.0.32-5~bpo10+1
Distribution: buster-backports
Urgency: high
Maintainer: Patrick Matthäi <pmatthaei@debian.org>
Changed-By: Patrick Matthäi <pmatthaei@debian.org>
Closes: 980891 985751 989992
Changes:
otrs2 (6.0.32-5~bpo10+1) buster-backports; urgency=medium
.
* Rebuild for buster-backports.
.
otrs2 (6.0.32-5) unstable; urgency=high
.
* Add upstream patch 14-ZSA-2021-03: There is a denial of service issue, when
a mail with a special crafted url is received. This can lead to a maxout of
the available server-CPU(s) and can reduce the quality of service or even
bring the system to a halt. This addresses CVE-2021-21439.
Closes: #989992
* Add upstream patch 15-ZSA-2021-06: There is a XSS vulnerability in the
ticket overviews, which can used to extract all kind of information just
by having a e-mail shown in an overview. An attacker can send a prepared
e-mail to the system to trigger the attack. This addresses CVE-2021-21441.
Closes: #989992
.
otrs2 (6.0.32-4) unstable; urgency=high
.
* Add upstream patch to update jquery-validate from version 1.16.0 to 1.19.3.
This fixes CVE-2021-21252.
Closes: #980891
.
otrs2 (6.0.32-3) unstable; urgency=medium
.
* debian/watch: Adjust github URL.
* Adjust symlinks to the dejavu fonts and remove obsolete ARCHIVE symlink.
Closes: #985751
.
otrs2 (6.0.32-2) unstable; urgency=medium
.
* Uploading to unstable.
Checksums-Sha1:
67804c7fdc03e1196132304b69e9a10ffd6a7814 1856 otrs2_6.0.32-5~bpo10+1.dsc
d56d7f4d542776fe673747f84689742da31ebe52 43068144 otrs2_6.0.32.orig.tar.gz
0be97148e9f560c36a635912aa77d6abd528c432 39016 otrs2_6.0.32-5~bpo10+1.debian.tar.xz
698962613d287dba99c0d0491f6448ecdb6d35eb 6099 otrs2_6.0.32-5~bpo10+1_source.buildinfo
Checksums-Sha256:
2144f927a9d5b65c8af430d7d8eb9edd64cdac78f7e2d742f8280422db22b57a 1856 otrs2_6.0.32-5~bpo10+1.dsc
c0db57d08038fa0f74000eb18c6995fbb4a74c4e0c97fc2f349f1bbb4c4b61da 43068144 otrs2_6.0.32.orig.tar.gz
807e8ef819867965f5400d2d841c0de452bce1941bd3b3ab29a3b8b512e12cad 39016 otrs2_6.0.32-5~bpo10+1.debian.tar.xz
592baaf0fc28745fa6fbaaa157232b554b9d7afe506b850d8e39633ab578657e 6099 otrs2_6.0.32-5~bpo10+1_source.buildinfo
Files:
270e0e71a951ddc1868cfee20b160f14 1856 non-free/web optional otrs2_6.0.32-5~bpo10+1.dsc
68c8bb26bef63d59e3aa1291b8d54543 43068144 non-free/web optional otrs2_6.0.32.orig.tar.gz
5ee2da7b977b6eca4850ea67f053af42 39016 non-free/web optional otrs2_6.0.32-5~bpo10+1.debian.tar.xz
888830c346f1d87683815d876a757482 6099 non-free/web optional otrs2_6.0.32-5~bpo10+1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=cxon
-----END PGP SIGNATURE-----
Reply to: