-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 21 Jul 2020 10:25:01 +0200
Source: otrs2
Architecture: source
Version: 6.0.29-1
Distribution: unstable
Urgency: high
Maintainer: Patrick Matthäi <pmatthaei@debian.org>
Changed-By: Patrick Matthäi <pmatthaei@debian.org>
Changes:
otrs2 (6.0.29-1) unstable; urgency=high
.
* New upstream release.
- Fixes CVE-2020-1776, also known as OSA-2020-13: When an agent user is
renamed or set to invalid the session belonging to the user is kept
active. The session can not be used to access ticket data in the case the
agent is invalid.
* Add missing dependency on libmoo-perl.
* Adjust many lintian overrides.
* Replace shebangs with /usr/bin/perl.
* Don't install examples anymore.
Checksums-Sha1:
a0141c8c8666af92db28968f5290acad727166a7 1817 otrs2_6.0.29-1.dsc
b978eb9ac201e26906567b8f9dc712cbcdad8b93 25829352 otrs2_6.0.29.orig.tar.bz2
3cea7786f248cd9767a57f71d719ebffe8e8d611 31120 otrs2_6.0.29-1.debian.tar.xz
de8bb09c4a34daa9ca8bb39296538d95c4ec419a 5961 otrs2_6.0.29-1_source.buildinfo
Checksums-Sha256:
c26a43f9a5f3cde71ae300e30706f91c2dc78763d07e9553add6eed58d873754 1817 otrs2_6.0.29-1.dsc
eb7c40a31aaf1354438eee23e5f8afbe100211a78bc804adbcf62e01708c8e17 25829352 otrs2_6.0.29.orig.tar.bz2
46ca6dd55247b7999c10d75283e353530d3f3e48ea4cc3a5646506fa7339dc99 31120 otrs2_6.0.29-1.debian.tar.xz
887748e2a6f352468b96c1e84f87ebe5df8ac73c2c7963be53634ce1b33a3b4b 5961 otrs2_6.0.29-1_source.buildinfo
Files:
6686edd2efdaca9bf72d00f43b703c30 1817 non-free/web optional otrs2_6.0.29-1.dsc
696acc7241982eae18581c55f0e3a54a 25829352 non-free/web optional otrs2_6.0.29.orig.tar.bz2
a2f284815518d3accef80f5d1ad68790 31120 non-free/web optional otrs2_6.0.29-1.debian.tar.xz
c4a4ae5bc7513a7cb4c6048cf0a8790d 5961 non-free/web optional otrs2_6.0.29-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=2CfC
-----END PGP SIGNATURE-----
