-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 30 Sep 2021 00:41:47 +1300 Source: request-tracker4 Architecture: source Version: 4.4.3-2+deb10u1 Distribution: buster Urgency: medium Maintainer: Debian Request Tracker Group <pkg-request-tracker-maintainers@lists.alioth.debian.org> Changed-By: Andrew Ruthven <andrew@etc.gen.nz> Closes: 995175 Changes: request-tracker4 (4.4.3-2+deb10u1) buster; urgency=medium . * Apply upstream patch which fixes a security vulnerability that involves a login timing side-channel attack. This resolves CVE-2021-38562 (Closes: #995175) Checksums-Sha1: 3ad09155f56c859b407a0786f19cd3e43ba0f23f 5546 request-tracker4_4.4.3-2+deb10u1.dsc cbd22689d735484c83c20b94a2080d68b4f2e9a2 78476 request-tracker4_4.4.3-2+deb10u1.debian.tar.xz 50f633cc9bb49419daa0d7344b11cee7e342b536 19027 request-tracker4_4.4.3-2+deb10u1_source.buildinfo Checksums-Sha256: da313be992172e23fe4ffad92f239fcb44aff380d21c30f228cbfd56f70b99eb 5546 request-tracker4_4.4.3-2+deb10u1.dsc 176cd61aead3122141282489d2b632a99860e641e3f6e7fceb28ab93eb49fae9 78476 request-tracker4_4.4.3-2+deb10u1.debian.tar.xz 96859f9326042b462af921decc1bbe2f2bef5e032a411325b9cf80dacbcd9d62 19027 request-tracker4_4.4.3-2+deb10u1_source.buildinfo Files: a68d8bb52277dc7e4395afffc4fd83c3 5546 misc optional request-tracker4_4.4.3-2+deb10u1.dsc 0e94ceab069d6b190f0526dd6f89ef6f 78476 misc optional request-tracker4_4.4.3-2+deb10u1.debian.tar.xz 2157f20473e56298a9fa3b7981d540ea 19027 misc optional request-tracker4_4.4.3-2+deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCAAvFiEEdqKOQsmBHZHoj7peLsD/s7cwGx8FAmFXX6sRHG50eW5pQGRl Ymlhbi5vcmcACgkQLsD/s7cwGx8CJRAAg2XYWmTPxhNkhl49n2rQwOuYrRQRIbDI dnm7Yw4byzteB1s4HtGVaMsTxNqqshgfugszksl4k4e48RaBa8wEMqJrQb4WAwIL 9oVp5IcvDvEIGH5ElbKLeCE+zObpU6aEy7dBHNd9oqc4wDe5FsUtUr/PxqEQgaC6 +wi9E3c7EkYXXod8YJPHg9+5eem5ugOf1Za1GKp0TkGkwwDuY9rRcCiPrQiVTd10 Zql9rJKjNx9dcU2RUk+DDSpbcZykPwfOT7WTKrvzdSurEiI46OCrv/j6YpsCpOmV RjvVQUNnYmIKTVHNWGRRQafUNiGnf91hnzMjtzcUGtBv3geKqnm8CjX8KkgNIFvx V9A+rjVt7pQVboNqNKNyxlpxLeUyhp9XWOrKVKNqp0bbkj+RQX7/2qgSFACmAXaf U40TAGZN4plZN4PIcfxnuUqzaMm1K9l5njb6EA+GvOl2Njf3FLJbyoxvrznPdn8h v16dyUkyWfm/d0Z7e2lzpddNMTUfbghMfFuOQ4CqkmnnLgnPO8zzs36b2YfKDCxa yEo846zYLw4WQMooaH8ziFx9uqVHcwyQT4JOyxx2iEW2nSHHPQkKjuk4HrAARwIm wTRY6KDH+lZcEE4wqnzPZf4l6s7sS472DAx9oA+IdaN+1wdclGlqOyw4aClEk9Df 4Gl7WsyCAqA= =DS/A -----END PGP SIGNATURE-----