-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 08 Oct 2025 21:48:14 +1300
Source: request-tracker4
Architecture: source
Version: 4.4.4+dfsg-2+deb11u5
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Request Tracker Group <pkg-request-tracker-maintainers@lists.alioth.debian.org>
Changed-By: Andrew Ruthven <andrew@etc.gen.nz>
Changes:
request-tracker4 (4.4.4+dfsg-2+deb11u5) bullseye-security; urgency=medium
.
* Apply upstream patch which fixes a security vulnerability.
- [CVE-2025-61873] Fix CSV injection via ticket values with special
characters that are exported to a TSV from search results.
Checksums-Sha1:
74ad87540506c92fdceb8f1147ae304bb17596c2 5702 request-tracker4_4.4.4+dfsg-2+deb11u5.dsc
a550ba2a5f7281abf3e2638e950262524e752107 3178021 request-tracker4_4.4.4+dfsg.orig-third-party-source.tar.gz
e2c9ed8716a180638b4ce34a05d67bcc6c4c0935 9977845 request-tracker4_4.4.4+dfsg.orig.tar.gz
97459e882438f0880332a86540f51c2a0d440e64 158260 request-tracker4_4.4.4+dfsg-2+deb11u5.debian.tar.xz
Checksums-Sha256:
89bf226159af3a51dd9e3f58ca4295f03c6f4de54ff36690c631f0ce1bbf234e 5702 request-tracker4_4.4.4+dfsg-2+deb11u5.dsc
9f142a07b09cd34c9120fa71b88fab7904bdb475096ac7405766d7ca2ee3505d 3178021 request-tracker4_4.4.4+dfsg.orig-third-party-source.tar.gz
34c316a4a78d7ee9b95d4391530f9bb3ff3edd99ebbebfac6354ed173e940884 9977845 request-tracker4_4.4.4+dfsg.orig.tar.gz
9d82b09ee1b86788b76245cb585c51a80612cbb2aa51e85d030f3123356979d2 158260 request-tracker4_4.4.4+dfsg-2+deb11u5.debian.tar.xz
Files:
3742a18050e5ef4f9e3afb007bdeee66 5702 misc optional request-tracker4_4.4.4+dfsg-2+deb11u5.dsc
dc2037ca7437687836bf74fa9e3ecc96 3178021 misc optional request-tracker4_4.4.4+dfsg.orig-third-party-source.tar.gz
4bb2ac970b70dfcb3b328472d1adc24e 9977845 misc optional request-tracker4_4.4.4+dfsg.orig.tar.gz
95e9a7cf533607eac94d0991895141a3 158260 misc optional request-tracker4_4.4.4+dfsg-2+deb11u5.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=59ga
-----END PGP SIGNATURE-----
