[request-tracker-maintainers] Bug#674032: Bug#674032: Fwd: [rt-announce] Security vulnerabilities in RT

[Dominic Hargreaves]

fixed 674032 4.0.5-3
thanks

On Tue, May 22, 2012 at 06:43:13PM +0200, Stefan Hornburg (Racke) wrote:
> package: request-tracker4
> version: 4.0.5-2
> tags: security

<snip upstream advisory>

This has been fixed in 4.0.5-3 and will, I understand, be fixed in 3.8
via a DSA later today. Source code to that update is at

svn://svn.debian.org/svn/pkg-request-tracker/packages/request-tracker3.8/tags/3.8.8-7+squeeze2

(Note: viewvc is broken for pkg-request-tracker SVN, I suspect because
it's showing an obsolete CVS repo instead).

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)