On Fri, Jun 01, 2012 at 10:19:12PM -0000, Tyler Hicks wrote:
> Thanks for taking the time to report this bug and helping to make Ubuntu
> better. Since the package referred to in this bug is in universe or
> multiverse, it is community maintained. If you are able, I suggest
> posting a debdiff for this issue. When a debdiff is available, members
> of the security team will review it and publish the package. See the
> following link for more information:
> https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

Patches ready for testing attached. See also
http://anonscm.debian.org/gitweb/?p=pkg-request-tracker/request-tracker4.git;a=shortlog;h=refs/heads/precise
http://anonscm.debian.org/gitweb/?p=pkg-request-tracker/request-tracker4.git;a=shortlog;h=refs/heads/oneiric

Note that I don't run RT on Ubuntu systems so can't help with testing.

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)


** Patch added: "rt4-secfix-oneiric.patch"
   
https://bugs.launchpad.net/bugs/1004835/+attachment/3174878/+files/rt4-secfix-oneiric.patch

** Patch added: "rt4-secfix-precise.patch"
   
https://bugs.launchpad.net/bugs/1004835/+attachment/3174879/+files/rt4-secfix-precise.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1004835

Title:
  Multiple security vulnerabilities in request-tracker4

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/request-tracker4/+bug/1004835/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to