-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 25 Nov 2025 13:02:57 +0100 Source: tryton-server Architecture: source Version: 6.0.29-2+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: Debian Tryton Maintainers <[email protected]> Changed-By: Mathias Behrle <[email protected]> Changes: tryton-server (6.0.29-2+deb12u4) bookworm-security; urgency=high . * Add 06_traceback_in_RPC.patch, 07_enforce_access_check_html_editor.patch, 08_enforce_access_check_export_data.patch . Fixes for security issues: . Enforce access check in HTML editor route https://bugs.debian.org/1121241 (s.a. #1121241) -> https://foss.heptapod.net/tryton/tryton/-/issues/14364 . Include the traceback only in RPC responses in development mode https://bugs.debian.org/1121242 (s.a. #1121242) -> https://foss.heptapod.net/tryton/tryton/-/issues/14354 . Enforce access check in export_data https://bugs.debian.org/1121243 (s.a. #1121243) -> https://foss.heptapod.net/tryton/tryton/-/issues/14366 Checksums-Sha1: c11b6766fe010aa01c3675864acd7136bc64d125 2720 tryton-server_6.0.29-2+deb12u4.dsc 8be3e984f64459bdb9e0303adc0b952d349082ac 60816 tryton-server_6.0.29-2+deb12u4.debian.tar.xz 6fa982dc82319f09a2540967e1168f7bd65abc2c 11278 tryton-server_6.0.29-2+deb12u4_amd64.buildinfo Checksums-Sha256: 8e79ea9c19d2b1a378abfa18227bb44e8ac7becd61f7b7419e07cb75d2373d0d 2720 tryton-server_6.0.29-2+deb12u4.dsc 9f25c79b392a5c1f62e9a689c09efa1b70d1b968eb6b41106cad3f7dd12456cf 60816 tryton-server_6.0.29-2+deb12u4.debian.tar.xz 01ffded99e75eb5cca6b82327cd3f289d21ff1c003a8cfdff4b510f5df85ea28 11278 tryton-server_6.0.29-2+deb12u4_amd64.buildinfo Files: bb4960958f23887837c668997f8f20c0 2720 python optional tryton-server_6.0.29-2+deb12u4.dsc 6898147b166e87c3b77df4eb1c3c2624 60816 python optional tryton-server_6.0.29-2+deb12u4.debian.tar.xz c4d175823dc78aacb70b96d62224764a 11278 python optional tryton-server_6.0.29-2+deb12u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- Comment: Signed by Mathias Behrle iQJFBAEBCgAvFiEErCl+XEa50LYccXaB1tCb5IQFu/YFAmknX0kRHG1hdGhpYXNi QG05cy5iaXoACgkQ1tCb5IQFu/aDuw//TA54bU1e0k2z72J3nUKNdEdvJCZZGQ0C tA0L/b6yPmnB2WytClGUQFheFuynMCF2ygX3MV1M+W4t/rNfwM46Bj1in76zjmJA 9q8k32huMj4enotxLSMr9H7dXP7rGBdrjQiqknwln2L9nriatvoH7jWjQjDxdIA8 4zcnn5b1uPyGBun9e7Kyh27D9UAb5DswqCKWzlptyR4cthJJvXUqziZbPEIz/4jN ebATdjDN/KZV2ESuK2DkdW7CHrR2l/un9bSq4R8F4Pml513I872dyDuCc8v2DAou /umo7R5j3+sQbyejXhCOjBxcZUL6JYJBmEz8o7J66+o2N1eV17I8u0xHs3ojyjSo EPGx1v1c6L6q4ewiu5uTjGXpUIXmFa+k/CI0nGoBYY7h4dt3ALaFQH6AzBxlxO5a iFYsS9wwXbfdC1mfdjf9RmxMnXUa0chfCYq1tMocXDsMW47Hlls2zo+FFFPoNx+R 5sTr2QRNBltUrWNaull5YWU5DLS+BD6zGbTTdB08U6pxChF8GDUdKy6nmwYWd17I Czr6RYIvjzzkYH/umEOWUcwF9ccANF/eJfq9dC4qqgLqbjJIgi500aSGAkjLeCyZ pF8SygeY7SXKQN2Tf/R7fVyerFmk/d+qG7zdCaOAjHW6xWnDtwuY/ijG0+0jikHz 66hcyFPCUWQ= =y0D2 -----END PGP SIGNATURE-----
pgpGzjWYjkRoY.pgp
Description: PGP signature
