[From nobody Fri Aug 7 03:35:04 2026 Received: (at 1127718-close) by bugs.debian.org; 7 Aug 2026 02:34:22 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 124; hammy, 150; neutral, 353; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:46842) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wsAPe-004XLe-0O for 1127718-close@bugs.debian.org; Fri, 07 Aug 2026 02:34:22 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wsAPc-000Dm4-2L for 1127718-close@bugs.debian.org; Fri, 07 Aug 2026 02:34:20 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=S8gj5xoAwgEAnoxctvUEqhFRXzQBaoeywlpmmdZKEWM=; b=o2MQTi57xwHEi7qoU5jtCk2iZ0 tw4O6lwiAJVf1M86zBlsPAfsKxqBln7pLWiuOuKtzPQrG6EsV/BxzosYByriPP6c3F86MlMS5MgXW RRpNmzl9UbBJmeO2bjT/tVxVRtCyRaVV8ZfXmGPFo/uS6iJ2HyBrYVHX6auXOOT/0ncomwlDbzOr1 xIVIA1Jig1L3s61csa3oJ4UyQ70anLE/XDNpVn+6FfowoRGT3OlYitcs/K1kcH/TcVgaP0GwcNkMP Or36iNIehSo7MpNGvPWK0rsSK/4NTi+oFmBZJqHNosKc2uGXmw6wa5Wj3FLTuq8beZCam2xgfIe2V iH509IWw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wsAPb-00000004WmW-3Qiq; Fri, 07 Aug 2026 02:34:19 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Soren Stoutner <soren@debian.org> To: 1127718-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: redmine Debian: DAK Debian-Changes: redmine_6.1.3+ds-1_source.changes Debian-Source: redmine Debian-Version: 6.1.3+ds-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1127718: fixed in redmine 6.1.3+ds-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8754984843375439767==" Message-Id: <E1wsAPb-00000004WmW-3Qiq@fasolo.debian.org> Date: Fri, 07 Aug 2026 02:34:19 +0000 --===============8754984843375439767== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: redmine Source-Version: 6.1.3+ds-1 Done: Soren Stoutner <soren@debian.org> We believe that the bug you reported is fixed in the latest version of redmine, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1127718@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Soren Stoutner <soren@debian.org> (supplier of updated redmine package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 06 Aug 2026 18:24:04 -0700 Source: redmine Architecture: source Version: 6.1.3+ds-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Team <pkg-ruby-extras-maintainers@lists.alioth.debian= .org> Changed-By: Soren Stoutner <soren@debian.org> Closes: 1127718 1140483 Changes: redmine (6.1.3+ds-1) unstable; urgency=3Dmedium . [ Soren Stoutner ] * New upstream version (closes: #1140483 - CVE-2026-1836). * Move debian/doc/examples/ to debian/examples/. * Rename debian/examples to debian/redmine.examples and change contents to install from debian/examples/. * Add debian/source/lintian-overrides. * Add debian/README.source to document the CRLF issue. * debian/patches/add-multi-tenancy-support.patch: Refresh offsets. * debian/patches/autoload-thin-gem.patch: Refresh offset. * debian/patches/fix-sanitation-tests.patch: Refresh offsets. * debian/patches/gemfile-deps-adjustment.patch: Update for latest release. * debian/patches/use-system-jquery-libs.patch: Refresh fuzz and offset. * debian/control: Update the following Build-Dependency and Dependency: - Bump Standards-Version from 4.7.3 to 4.7.4, no changes needed. - Add ruby-bcrypt. - Add ruby-oauth2. - Add ruby-rest-client. - Add ruby-doorkeeper (>=3D 5.9.3), (<< 5.10). - Add ruby-doorkeeper-i18n (>=3D 5.2), (<< 5.3). - Add ruby-importmap-rails (>=3D 2.0), (<< 3). - Add ruby-minitest (>=3D 5.27), (<< 6.1). - Add ruby-requestjs-rails (>=3D 0.0.13), (<< 0.1.0). - Add ruby-stimulus-rails (>=3D 1.3), (<< 2.0). - Bump debhelper-compat from version 13 to 14, dropping now unnecessary ${misc:Depends}. - Bump ruby-commonmarker from (>=3D 0.23.8), (<< 0.24) to (>=3D 2.8.3), (<< 2.9). - Bump ruby-i18n from ruby-i18n (>=3D 1.14.1), (<< 1.15) to (>=3D 1.15.2= ), (<< 1.16). - Bump ruby-mail from (>=3D 2.8.1~), (<< 2.9) to (>=3D 2.9.1), (<< 2.10) (closes: #1127718). - Bump ruby-minitest from (>=3D 5.27), (<< 6.1) to (>=3D 6.0), (<< 7) - Bump ruby-nokogiri from (>=3D 1.18.3), (<< 1.19) to (>=3D 1.19.1), (<<= 1.20). - Bump ruby-rails from (>=3D 2:7.2), (<< 2:8.0) to (>=3D 2:7.2.3), (<< 2= :7.3). - Bump ruby-rbpdf from (>=3D 1.21.3~) to (>=3D 1.21.4). - Bump ruby-rouge from (>=3D 4.5), (<< 5.0) to (>=3D 5.0), (<< 6). - Bump ruby-sqlite3 from (>=3D 1.7.0), (<< 1.8) to (>=3D 2.9.0), (<< 2.1= 0.0). - Bump ruzy-zip from (>=3D 3.2.2), (<< 3.3) to (>=3D 3.4.1), (<< 3.5). - Change ruby-rack (>=3D 3.1.3~), (<< 3.2) to ruby-rack (>=3D 3.1.3) to = match the Gemfile. - Remove unnecessary ~ from the version constraints. - Drop the unnecessary dependency on ruby-simplecov. * debian/copyright: - Bump my copyright years to be 2024-2026. - Update app/assets/ stanza to match new upstream release. * debian/README.Debian: Fix typos. * debian/readmine.lintian-overrides. Add override for package-contains-empty-directory. * debian/rules: - Make the new /usr/share/rebmine/bin/importmap executable. - Remove the example plugin. - Remove unnecessary double-upstream README file. - Remove "FIXME" from comment and replace with an explanation of the file permission modification (fixes a lintian info tag). * debian/watch: Update to version 5. . [ Lucas Nussbaum ] * Remove unnecessary debian/.gitattributes. Checksums-Sha1: 4a3eef7ba9a6a0bb89e580b445ee3f13dd35687d 4121 redmine_6.1.3+ds-1.dsc 36a4f5ae4b1eceff866ccd119e2733830b8ebfc6 2905280 redmine_6.1.3+ds.orig.tar.xz 02ff058797f7dd6ae936d91043d6e3122a7ca871 101108 redmine_6.1.3+ds-1.debian.ta= r.xz 5bb48366dd57abeb60972bd22ec9a3a90103a490 13096 redmine_6.1.3+ds-1_amd64.buil= dinfo Checksums-Sha256: 9bfea8e8f8add5f1007f5d0282c1be4cc8cd56189bfca33c6964208c8be47635 4121 redmin= e_6.1.3+ds-1.dsc 01f868f82feaf25c298b7c2e3471da63f36e07d104e33d4c8e52817ce5d323df 2905280 red= mine_6.1.3+ds.orig.tar.xz 7aba41195e3f49522e56680b9950fc920beadb332a77bd1e33f2e68b3db97f45 101108 redm= ine_6.1.3+ds-1.debian.tar.xz 3882f0b6f32545d3e8a37a714950f2aed9be1e6642f354b5e57deee39983d3a1 13096 redmi= ne_6.1.3+ds-1_amd64.buildinfo Files: 16d7a68afeb0ef46281ee27139098131 4121 web optional redmine_6.1.3+ds-1.dsc 484ca8e8989cb30bece3f691f2fc8f37 2905280 web optional redmine_6.1.3+ds.orig.= tar.xz b0eeeabd5437c6466fd5542c859ddcb3 101108 web optional redmine_6.1.3+ds-1.debi= an.tar.xz 52f6ddfb0a8a9960cfdacf31f87784f3 13096 web optional redmine_6.1.3+ds-1_amd64= .buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmp1QWoACgkQwufLJ66w tgO7PQ/+ObSrOkLhW2XmbA7kRYtEA6Cv4xkIF/zk+kY+vygV3T985vitkZxXCBku +D43Xplq1D9qSpJHQC3YLa9s/lmzmslq3j6lBk/cPeUSElEWNOrtyykEDYhjlYZa PwNgLdZIYOVowx1WU18aa+G3C62JVYIdXE6kaKXppGut197OcmgbsxpYGwKhC3Jm Imc/rgDxAyHoET1hwXvIndvpOKhFW5V59sUX0eFCwNZRSI3epNf3ybK1HXq6YTrB oQeTJww/70G4D0+S3fmQz5F0Kz/P/vBNjNf9ViuKU1J8z2EviMm8tPCsz7wiEXAO ey5w9VXLnJB4+qyGjS6+qxlVNCzSVbC0v6MdJBjvE+csq+eYUEetEaKF2xbbCTC6 l5jUqAFF3qy6jtGlSXaUjno6rv7O/Mc9iiYNlUD/3L8d27tIU795QGKAFIofuZpx CYY9bIHTx+AKmjmefPE9J+EDo9WxARfyosBJQusAkkZfsifv2h9MHwgUTA9aSgJR H5+RvV2ZSaUCa5nFL1UpAX65acjw+g5xOo5RTZZSqEMf+E+Q99oOXlLD2Lt7cnXk vP69aaT4ZEN8STFyuu3NL+KitaLuzNtJ8sBvetJ8yZxZ07Ayh1yrJKtVtiEg7MSW EGPTAJuNbyZ69HOpjuwnyuVOsQDCg4We0HNL32qWRqafD+1ay7I=3D =3DR1or -----END PGP SIGNATURE----- --===============8754984843375439767== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanVEKwAKCRCb9qggYcy5 IX/iAP9q4+QtO9F3/ZmKZf1Vxri5t3izTbUR/KQSkcGYt2o6iQD/aqY5vioFQdCN oPpIGGVXNjblrp1FjIsguONaR2TrMAM= =zyk2 -----END PGP SIGNATURE----- --===============8754984843375439767==-- ]