-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 09 Nov 2016 10:06:51 +0100 Source: otrs2 Binary: otrs2 otrs Architecture: source all Version: 5.0.14-1 Distribution: unstable Urgency: high Maintainer: Patrick Matthäi <pmatthaei@debian.org> Changed-By: Patrick Matthäi <pmatthaei@debian.org> Description: otrs - Open Ticket Request System (OTRS 5) otrs2 - Open Ticket Request System Closes: 843091 Changes: otrs2 (5.0.14-1) unstable; urgency=high . * New upstream release. - Fixes CVE-2016-9139, also known as OSA-2016-02: An attacker could trick an authenticated agent or customer into opening a malicious attachment which could lead to the execution of JavaScript in OTRS context. Closes: #843091 * Adjust linitian overrides. Checksums-Sha1: 15f52ab89426e68d2d24bdfc394fa36106b07fad 1796 otrs2_5.0.14-1.dsc 937d4b0768f1ef3c50771ce21bbf62bbc064184e 19350822 otrs2_5.0.14.orig.tar.bz2 a47e67f15ef9422dd0ebfaf6a28fd0d2557723e9 44784 otrs2_5.0.14-1.debian.tar.xz 4c893ef1274a9c551d0d9b2b6433e5c223cda113 6484 otrs2_5.0.14-1_20161109T090840z-750258a2.buildinfo a808b0824597cf6dab210c5dca98466e26b6c3a2 6997370 otrs2_5.0.14-1_all.deb 36fe2cb0c998c18359271a87d533fcfd74224df8 210236 otrs_5.0.14-1_all.deb Checksums-Sha256: 1adb15410c486258877d33dc5be5b9c86b15f0fc6c496e83bc80c04286112216 1796 otrs2_5.0.14-1.dsc aaa5d3be55d69d665fef4a2c24c6c901afd338492ca7cfe278782a4041367019 19350822 otrs2_5.0.14.orig.tar.bz2 98a189f72f60f9d05af18458c410fc995bcfdc7f44ee5a9242ff29d7c27118e7 44784 otrs2_5.0.14-1.debian.tar.xz a037c49204146598a4fd972ac07b2427a82fb87ef1f023e97abc839fa1e24243 6484 otrs2_5.0.14-1_20161109T090840z-750258a2.buildinfo 0bb53f6e1ecc86b4c4a12c64f644256a1d803ffb3a08964f29c129e682a169dd 6997370 otrs2_5.0.14-1_all.deb ef1aa746433d4834b65ea39787de8e694979df78d718ed27f6e0f6ad3bf67170 210236 otrs_5.0.14-1_all.deb Files: a69af0c4bacf895bbd558811e313e1d3 1796 non-free/web optional otrs2_5.0.14-1.dsc 00a8694b5fb65934f4cb281d1c2842a1 19350822 non-free/web optional otrs2_5.0.14.orig.tar.bz2 58ea7850ba7eb081f13a6cace5e2bb94 44784 non-free/web optional otrs2_5.0.14-1.debian.tar.xz 750258a22ee3101adb912e5dfc80da3f 6484 non-free/web optional otrs2_5.0.14-1_20161109T090840z-750258a2.buildinfo 2b385892f51e902239db36353a233fa6 6997370 non-free/web optional otrs2_5.0.14-1_all.deb b93848d1edac579fbe6d59ad34576157 210236 non-free/web optional otrs_5.0.14-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJYIvjZAAoJEBLZsEqQy9jk4gsP+gJ6HwtuBLPvpnPJtCvqFbFv hGd3Jkw57jlii6r9EADWPm8V2omJ01nomgHTZ4QbZfr0/Mo2kC4RF1akrPkGkDZI YFfbO6m9JVJrsHhYyZQzuzhwK22h8Dp5080ClU1Vsl10m2YCPKFCK8z4BdiQ5VCD G2xsxtDQa2qljNIWaWDH3A2MC+y9yIOvIj8WhilRVdXn2nE3pKtM1zlViaxZ1h+B rJ3fCowSCCLNTSV3pofIGpOoLEPUmuQrLBlQ4rE16IuMDIOU9zR18fp6rzba9vsL 3QNW+pJxJ//+XKjgLpBlcvkdXckzrP0gr+5Nco+Ovj73eDcZPKT1wbJYDiBqkP2g jT53jQ0DXrtyyGNborbGAipXYZezv2/cPVoHBqxoZxYCtGo5B7Z6Guf5yMhAzIVu Wf1MKZIqIW2yR9h2R5CY1QD2i8mr6eoIoyCtY23+60Qdj9hb3zZ532ylIxAwck1J zNpTBHQDJovAZMft09viGn0+FTY/Pyplf4lL8upX6e/5t4A+Q+is4kDH+E7skgCp r9IgVJDdZYDwnEKqJ0/Er+vRvz9fk0TCBs8FXk74pGkMe+XOAF7taTf4Sn5m8qvC Mq5G8B034xDCnyU8kE4o7lkZhV2NfjLkQic0RwM0He1KVV0h+HjxKV8Depe2bxPP 5nCcVmicjLcNd2Fo2KtU =/LOb -----END PGP SIGNATURE-----