Your message dated Sun, 05 Jul 2009 13:54:35 +0000
with message-id <[email protected]>
and subject line Bug#532990: fixed in request-tracker3.6 3.6.7-5+lenny1
has caused the Debian Bug report #532990,
regarding request-tracker: root priviledges for config dialog
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
532990: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532990
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: request-tracker3.6
version: 3.6.1-4
tags: security , patch
severity: normal
hello,
there is a security weakness in request-tracker. see [1] for
description and patches. this is already fixed in unstable, but
stable/oldstable are still vulnerable. please coordinate with the
security team to prepare updated packages for the stable releases.
thanks.
[1]
http://lists.bestpractical.com/pipermail/rt-announce/2009-June/000169.html
--- End Message ---
--- Begin Message ---
Source: request-tracker3.6
Source-Version: 3.6.7-5+lenny1
We believe that the bug you reported is fixed in the latest version of
request-tracker3.6, which is due to be installed in the Debian FTP archive:
request-tracker3.6_3.6.7-5+lenny1.diff.gz
to pool/main/r/request-tracker3.6/request-tracker3.6_3.6.7-5+lenny1.diff.gz
request-tracker3.6_3.6.7-5+lenny1.dsc
to pool/main/r/request-tracker3.6/request-tracker3.6_3.6.7-5+lenny1.dsc
request-tracker3.6_3.6.7-5+lenny1_all.deb
to pool/main/r/request-tracker3.6/request-tracker3.6_3.6.7-5+lenny1_all.deb
rt3.6-apache2_3.6.7-5+lenny1_all.deb
to pool/main/r/request-tracker3.6/rt3.6-apache2_3.6.7-5+lenny1_all.deb
rt3.6-clients_3.6.7-5+lenny1_all.deb
to pool/main/r/request-tracker3.6/rt3.6-clients_3.6.7-5+lenny1_all.deb
rt3.6-db-mysql_3.6.7-5+lenny1_all.deb
to pool/main/r/request-tracker3.6/rt3.6-db-mysql_3.6.7-5+lenny1_all.deb
rt3.6-db-postgresql_3.6.7-5+lenny1_all.deb
to pool/main/r/request-tracker3.6/rt3.6-db-postgresql_3.6.7-5+lenny1_all.deb
rt3.6-db-sqlite_3.6.7-5+lenny1_all.deb
to pool/main/r/request-tracker3.6/rt3.6-db-sqlite_3.6.7-5+lenny1_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dominic Hargreaves <[email protected]> (supplier of updated request-tracker3.6
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 13 Jun 2009 17:12:04 +0100
Source: request-tracker3.6
Binary: request-tracker3.6 rt3.6-clients rt3.6-apache2 rt3.6-db-postgresql
rt3.6-db-mysql rt3.6-db-sqlite
Architecture: source all
Version: 3.6.7-5+lenny1
Distribution: stable
Urgency: low
Maintainer: Debian Request Tracker Group
<[email protected]>
Changed-By: Dominic Hargreaves <[email protected]>
Description:
request-tracker3.6 - Extensible trouble-ticket tracking system
rt3.6-apache2 - Apache 2 specific files for request-tracker3.6
rt3.6-clients - Mail gateway and command-line interface to request-tracker3.6
rt3.6-db-mysql - MySQL database backend for request-tracker3.6
rt3.6-db-postgresql - PostgreSQL database backend for request-tracker3.6
rt3.6-db-sqlite - SQLite database backend for request-tracker3.6
Closes: 532990
Changes:
request-tracker3.6 (3.6.7-5+lenny1) stable; urgency=low
.
* Security fix: only allow SuperUsers to edit global RT at a Glance
(Closes: #532990)
Checksums-Sha1:
25bc4fe8498500450f359bc73bca2fc479da084a 1623
request-tracker3.6_3.6.7-5+lenny1.dsc
f04658b082f5c621d25dea9d32453d5f176cdb2b 50683
request-tracker3.6_3.6.7-5+lenny1.diff.gz
187bbacce39400fdac8c65a1d4073fc79a96da7f 1540186
request-tracker3.6_3.6.7-5+lenny1_all.deb
633d1fe541c9dedd5b338ce3f1e1f231a3b78c9b 215638
rt3.6-clients_3.6.7-5+lenny1_all.deb
fb90cdfc8ae96a533eed0b4db7fb9097994df398 187096
rt3.6-apache2_3.6.7-5+lenny1_all.deb
54b933fcc6eb0fec002a05e3e28cfe7997083f9e 185402
rt3.6-db-postgresql_3.6.7-5+lenny1_all.deb
4c201d7c7b2069bcb00b35b8de186cbfa448e8c9 185398
rt3.6-db-mysql_3.6.7-5+lenny1_all.deb
ac9078124b6b3296dec56e46fd8391a3e6386454 185498
rt3.6-db-sqlite_3.6.7-5+lenny1_all.deb
Checksums-Sha256:
a3dfd8d56d59344779f3617e706cdabbbb6db792acacd815048e71fb11ea4d95 1623
request-tracker3.6_3.6.7-5+lenny1.dsc
f7bdb693c6e0b50cab0a0b6d71fdd8dc255f23ce7a9f2721a9b53da4cb287c9c 50683
request-tracker3.6_3.6.7-5+lenny1.diff.gz
acade5451fe1aadb123242d322996b26b37383905d0760b12123354eb68edb30 1540186
request-tracker3.6_3.6.7-5+lenny1_all.deb
b4cfbfc2b2055bc5e641c001745c7216c0190d19135965a2eb5e4cbaca07fd1b 215638
rt3.6-clients_3.6.7-5+lenny1_all.deb
cf7fcd587a1b7f92b7b49aae1d06d861e5b322963bc77e6db8b02f4d93799f49 187096
rt3.6-apache2_3.6.7-5+lenny1_all.deb
db8bd9f5fa6f411dd5557957b0fae3697f75c13a434d7bb1372bbadd28292b6b 185402
rt3.6-db-postgresql_3.6.7-5+lenny1_all.deb
c135a3c81d7157dc0538f4645ff5858c7224163c722e07363c3b6da2244f0962 185398
rt3.6-db-mysql_3.6.7-5+lenny1_all.deb
fca002ec859255070dca63b1e987f410746ed5356005de74c2d41140ccd4c78f 185498
rt3.6-db-sqlite_3.6.7-5+lenny1_all.deb
Files:
38a63b19a23c84748a220b0dde712737 1623 misc optional
request-tracker3.6_3.6.7-5+lenny1.dsc
01d169a2888f24326c2fbae63c549afd 50683 misc optional
request-tracker3.6_3.6.7-5+lenny1.diff.gz
a97a593d9caf823b0699b9cdc8597da0 1540186 misc optional
request-tracker3.6_3.6.7-5+lenny1_all.deb
e0c3a4e6581e6ef650d8b7d079f2949a 215638 misc optional
rt3.6-clients_3.6.7-5+lenny1_all.deb
a1bc1cfc25848b17cb373fb24c4152a6 187096 misc optional
rt3.6-apache2_3.6.7-5+lenny1_all.deb
add78d7d11821ab614025f5f1bf50d08 185402 misc optional
rt3.6-db-postgresql_3.6.7-5+lenny1_all.deb
7843a2da133cb81d4e8a682f606b0df8 185398 misc optional
rt3.6-db-mysql_3.6.7-5+lenny1_all.deb
8d38db7136b4c67a9a22a7f8144aa330 185498 misc optional
rt3.6-db-sqlite_3.6.7-5+lenny1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFKM9FxYzuFKFF44qURAsY7AKDQ1nVUtCpiQ364cLtJCGExjKA2kwCg2F8F
4Fgp15LMD/R0+b4a0WwWdmM=
=1hUi
-----END PGP SIGNATURE-----
--- End Message ---
