-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 19 Jun 2013 16:13:02 +0200 Source: otrs2 Binary: otrs2 otrs Architecture: source all Version: 3.2.8-1 Distribution: unstable Urgency: high Maintainer: Patrick Matthäi <pmatthaei@debian.org> Changed-By: Patrick Matthäi <pmatthaei@debian.org> Description: otrs - Open Ticket Request System (OTRS 3) otrs2 - Open Ticket Request System Changes: otrs2 (3.2.8-1) unstable; urgency=high . * New upstream release. - Security fix for CVE-2013-4088, also known as OSA-2013-04: An attacker with a valid agent login could manipulate URLs in the ticket watch mechanism to see contents of tickets they are not permitted to see. - Rewrite patch 03-backup. - Refresh patch 09-disable-DashboardProductNotify. - Refresh patch 12-use-debian-libjs-packages. - Refresh patch 14-font-paths. * Merge 3.1.7+dfsg1-8+deb7u2 changelog. Checksums-Sha1: e69b60089f262cce45f36aa52b6a1e1139990fad 1755 otrs2_3.2.8-1.dsc bd8ce903694af6e87ee4b55e631d122c1a2d4606 21818695 otrs2_3.2.8.orig.tar.gz b1fc9f13dba1c77746e4fea63bd238d193835266 37971 otrs2_3.2.8-1.debian.tar.gz d7f1e233bb7c71445d31b680a4d4324483f09337 4420512 otrs2_3.2.8-1_all.deb 515c61a13e08e7d78b78169977694a01aa8d9994 160724 otrs_3.2.8-1_all.deb Checksums-Sha256: b9042f1b0e26d980d5a020ba678e9381edc3d0e350c52195cbeb9c3bc497f137 1755 otrs2_3.2.8-1.dsc 95ac95542ad43f8812b785ec2591892e5a0c7cbaa48b371afd1e1e4113a40be2 21818695 otrs2_3.2.8.orig.tar.gz e7275c86fe97810ed67e94d5898b6091dd92a7f095fb048be93e9fba6242da67 37971 otrs2_3.2.8-1.debian.tar.gz 735c233dee276cec490f98859e1cb7da9297b805d9cb885c973382f0a5031d14 4420512 otrs2_3.2.8-1_all.deb acd9ba332ed168ac5f422c454c4510b1698eba06e493e87aebafe5ae80d2fbc9 160724 otrs_3.2.8-1_all.deb Files: 2b5644af6fc4a20fc8f9747a92ce2d58 1755 web optional otrs2_3.2.8-1.dsc 15ce6e7716407f354e62c652d56c8f0f 21818695 web optional otrs2_3.2.8.orig.tar.gz e508a08f8b6a208a625ad39ee330e5b6 37971 web optional otrs2_3.2.8-1.debian.tar.gz 05b4b04ffaf89c8f6d2081354c931adb 4420512 web optional otrs2_3.2.8-1_all.deb c015d1ea9eae30f93673a3bdae742c0e 160724 web optional otrs_3.2.8-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJRwb4hAAoJEBLZsEqQy9jkP68QAIFKQSN3ZBj6s5gJ4qAaZ48h YeNJ4ZLb4g8g/KjxpbHcJVGXRQrYM/QlqQaNVRKsYG0+9TyZmt3YkFIRsLZUFhSY XM1aU0wPpE2ggFG4sCKr0ZSxYvZJcPJVtPwfNGNxWSPquFH3ARD7UFKbxmPv5aQR EdFMrsqABOrSG4ofvxKPqtpEK/9c9SHHfd4pgmsi2nyD5+LN7Fyzl6iwXYKtwzeK KdphhBTIcG70yqQgtW2IPxb9kFmFPJlBDvLzoFdIW1Yg5a8QgVGmqwKNMohsF3hR iIf1a29HzmhRW5fzpGmjTTS2gVATP9Y6fuafIHi0eN3tkVX1hFgOIc2h0xtm7pgT 0A8yg0nZR5gZKrngEZmxoOPcK0hAhK1BazDbgVt9bVz2yE6kOh1UihFKIpP978ep gAbvEkRxFuAHmQt2MKJETbz5xomzx2H6Sz31M2rxOo1zrxiB6l/7uwNU4sgD4bLM PLcQPcGlpNx+lPgE0bLyRM+Vsy65bU2RYUvl1ADGR+SUaQHfIGOuAzpdEKRvIZSX Oo95RJklNRmCLn5qJOld6I3Rx2SXgLNi+xcgWyNvHHenuqbFhTSS9sOXel2Xoxic GCOdfddErwKyXpWIbJ5bbb3T8cpyHc9G2vWHwbkP9HVEzgjs0RdFRqeF1OYPJQin k/ZvLB3fkPJ44HOK4ZAn =K6bl -----END PGP SIGNATURE-----