-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Jan 2026 20:38:04 -0500 Source: kanboard Architecture: source Version: 1.2.49+ds-1 Distribution: unstable Urgency: medium Maintainer: Joseph Nahmias <jello@debian.org> Changed-By: Joseph Nahmias <jello@debian.org> Closes: 1125061 Changes: kanboard (1.2.49+ds-1) unstable; urgency=medium . * New upstream version 1.2.49+ds + fixes CVE-2026-21880 aka GHSA-v66r-m28r-wmq7 Kanboard LDAP Injection Vulnerability + fixes CVE-2026-21881 aka GHSA-wwpf-3j4p-739w Kanboard Reverse Proxy Authentication Bypass + fixes CVE-2026-21879 aka GHSA-mhv9-7m9w-7hcq Kanboard Open Redirect Vulnerability Closes: #1125061 * refresh patches Checksums-Sha1: abfcc063e3f6ba57b81e45c7d47779c97a0911ee 2680 kanboard_1.2.49+ds-1.dsc bcbf918cb6793bbf5d5b4607b729162972585ac0 1093656 kanboard_1.2.49+ds.orig.tar.xz 98015e17d45b127b55220554f7f4c83e7a22c401 21172 kanboard_1.2.49+ds-1.debian.tar.xz e09eb5f5bcb9abedf109fd10cf4afe11c7a06d77 11068 kanboard_1.2.49+ds-1_amd64.buildinfo Checksums-Sha256: 1efbf39218c10e3762ec3167ecaadbb4a72a336baafed8e638dd2e4b41ed273f 2680 kanboard_1.2.49+ds-1.dsc e55cb752ef69e9df08c1e327bb85b43056451714722632a484a7cc24d1f50218 1093656 kanboard_1.2.49+ds.orig.tar.xz ee917e64612dfe37cbaa320a22b48e625442b011354807dd377522870ee5204b 21172 kanboard_1.2.49+ds-1.debian.tar.xz 7d0961ad1354fc2f73d5c2468de26c48ad1ae758b792d1595a5388ad06347830 11068 kanboard_1.2.49+ds-1_amd64.buildinfo Files: 6f5dfce48c4455c63179bdbe20f40b2d 2680 web optional kanboard_1.2.49+ds-1.dsc 01d3c39df869cca919de19e2af69c601 1093656 web optional kanboard_1.2.49+ds.orig.tar.xz a1d74c3f1d0c8ab6f00615defd0051ae 21172 web optional kanboard_1.2.49+ds-1.debian.tar.xz b49b9c45983370228e143f9212366731 11068 web optional kanboard_1.2.49+ds-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcxc7CTsDz7hRCK0UsRvZGQeaO5gFAmlgYZYACgkQsRvZGQea O5ho+g/+IVqd2Ppk5/10z9cxoZ/cO0diGOCZVdkOHSe0g1coDmaB727RNsnTiD+U WOdNa5p86z3jII1ogqrfrMz/Kh6YnlVlnI+lRZ4zj37ZTR0jGZ12sfKRt7B97PfS ne7uXriQg1OpNdbUi4HNBk7lCZraeVnkuBVXBdyHo10vGJT0joBrABuSEa4qNU/i khYloWm03Yw3injScLAVCClGyXJnGBwHaX6rH/Hg11JwbMeilwKv1hlv6wVVQRhH IIJ1uOMRDelVi81IfgxlYHzAAlEJT1b3ZT4ESLOIsdTw/xt8FwICi9VdKB7E8eyk WPNHtH2bXgT7UsI6cxGX1sbIFGe2R6plgoHK1K08S7Xb9dsUUn8ZRVGhPDmFml5C EtVzD1sO2aR0GZ2AVtYYv/okVg7mA0Rh5vTCkSMCiO2i2b0OYs2qRS+djycqZzcW fByfxlQb8JvAAJ6voB0x+VC1ztnKHZkVAcaI6MFdfPOSAsJpKoFQdhs//7d1xZMm bQf4ZL+Pw9+YS/jiFZiCr+6poPty22eOefAu3nidvqut8mMoKaOCZuyIwGj7JMpG F1X5hYr8TtlrbfaYDwpLGtGdApC9eBmHu0tg1/f6Y9cIb6AOB5CicTzTjcNuMT5b KG6rBJNTtSMpepwLq0KoAE4Cvnw/ASHdvL5YiU0hG5LYFLAaKYM= =H01U -----END PGP SIGNATURE-----