-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 08 Feb 2010 00:03:27 +0100 Source: otrs2 Binary: otrs2 Architecture: source all Version: 2.2.7-2lenny3 Distribution: stable-security Urgency: high Maintainer: Patrick Matthäi <pmatthaei@debian.org> Changed-By: Patrick Matthäi <pmatthaei@debian.org> Description: otrs2 - Open Ticket Request System Changes: otrs2 (2.2.7-2lenny3) stable-security; urgency=high . * Added patch fix-sql-injection.diff, which adds missing security quoting in SQL statements. Authenticated users may become administrative privileges. This fixes CVE-2010-0438. * Change maintainer also in security upload (for further users questions). Checksums-Sha1: 86f5d338a6d63345bfc6ef81692ce38b15feca82 1158 otrs2_2.2.7-2lenny3.dsc f6c34078bfa979782b19cecceaf15b3ce28f03a8 2408608 otrs2_2.2.7.orig.tar.gz d4e8d936beaa46e2e0bd678fd238b1768643673c 20692 otrs2_2.2.7-2lenny3.diff.gz 3452a9fe47754e6362865f6c6bedee2ae02e47e8 2269878 otrs2_2.2.7-2lenny3_all.deb Checksums-Sha256: aa0a506a8eb8ecef940af021230f2f05e78e69b85f729ba96d00b0fd8ac5569d 1158 otrs2_2.2.7-2lenny3.dsc 8eaf525d7a89dd15f82b1e817933006572d8c35e82455bd0cc483b92799803c7 2408608 otrs2_2.2.7.orig.tar.gz ba0a4618600680564d90dac42a47889b12b6303791c4ad1088b8c5dbc35d962f 20692 otrs2_2.2.7-2lenny3.diff.gz 8e641de54c7759cfd4558b6e4a5b39cc0cddd732b33dccf6b9562ea9823136a5 2269878 otrs2_2.2.7-2lenny3_all.deb Files: b63b2b107937edf4d8106dbd17bb071c 1158 web optional otrs2_2.2.7-2lenny3.dsc 37b88801b0d6bf547b929b7da518d0fb 2408608 web optional otrs2_2.2.7.orig.tar.gz 018c3116054e50ab707d4a67473352c8 20692 web optional otrs2_2.2.7-2lenny3.diff.gz 0fef1360d9d68ce71246ae4893c03ea2 2269878 web optional otrs2_2.2.7-2lenny3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAktv1+QACgkQ2XA5inpabMcV5gCeNFn93u4Knk0d2HHqsKy9wCu8 I9wAnRpr2Oo7JimQYqKMRq0ZVgVcd2Ha =XYP7 -----END PGP SIGNATURE----- Accepted: otrs2_2.2.7-2lenny3.diff.gz to main/o/otrs2/otrs2_2.2.7-2lenny3.diff.gz otrs2_2.2.7-2lenny3.dsc to main/o/otrs2/otrs2_2.2.7-2lenny3.dsc otrs2_2.2.7-2lenny3_all.deb to main/o/otrs2/otrs2_2.2.7-2lenny3_all.deb