[request-tracker-maintainers] Bug#614576: request-tracker3.8: Scrip information leakage

Dominic Hargreaves dom at earth.li
Tue Feb 22 11:46:04 UTC 2011


Package: request-tracker3.8
Version: 3.8.8-7
Severity: important
Tags: security

The following appears in the changelog of 3.8.9:

 * Clone Scrip's TicketObj since we change the CurrentUser and it can leak
    information (Custom field values, etc)

This may warrant an update in s-p-u.





More information about the pkg-request-tracker-maintainers mailing list