[request-tracker-maintainers] request-tracker4_4.0.7-2_i386.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 23 Oct 2012 10:58:58 +0100
Source: request-tracker4
Binary: request-tracker4 rt4-clients rt4-fcgi rt4-apache2 rt4-db-postgresql rt4-db-mysql rt4-db-sqlite
Architecture: source all
Version: 4.0.7-2
Distribution: unstable
Urgency: high
Maintainer: Debian Request Tracker Group <pkg-request-tracker-maintainers at lists.alioth.debian.org>
Changed-By: Dominic Hargreaves <dom at earth.li>
Description: 
 request-tracker4 - extensible trouble-ticket tracking system
 rt4-apache2 - Apache 2 specific files for request-tracker4
 rt4-clients - mail gateway and command-line interface to request-tracker4
 rt4-db-mysql - MySQL database backend for request-tracker4
 rt4-db-postgresql - PostgreSQL database backend for request-tracker4
 rt4-db-sqlite - SQLite database backend for request-tracker4
 rt4-fcgi   - External FastCGI support for request-tracker4
Changes: 
 request-tracker4 (4.0.7-2) unstable; urgency=high
 .
   * Multiple security fixes for:
     - Email header injection attack (CVE-2012-4730)
     - Missing rights checking for Articles (CVE-2012-4731)
     - CSRF protection allows attack on bookmarks (CVE-2012-4732)
     - Confused deputy attack for non-logged-in users (CVE-2012-4734)
     - Multiple message signing/encryption attacks related to GnuPG
       (CVE-2012-4735)
     - Arbitrary command-line argument injection to GnuPG (CVE-2012-4884)
Checksums-Sha1: 
 71226e0b899eeae700ddcdb34a22a2c80e617a0f 2112 request-tracker4_4.0.7-2.dsc
 c28f76b5d17213d0f776216ce7f62c55dbc49955 75914 request-tracker4_4.0.7-2.debian.tar.gz
 31823074a6892202a9d45eafb0f288a3d001c1b8 3953688 request-tracker4_4.0.7-2_all.deb
 78e3aa9dc3f2499a9da414e9019cd28bdc0fb3d4 46748 rt4-clients_4.0.7-2_all.deb
 eb296465f3aae947f527012f47e5974fbf7e558e 10362 rt4-fcgi_4.0.7-2_all.deb
 665393994478301720b365769f9447aa56408102 9296 rt4-apache2_4.0.7-2_all.deb
 19ca465a3f5ea2e39a508b997a5903ea42be4821 8494 rt4-db-postgresql_4.0.7-2_all.deb
 9ec217d8b044a0b90c71a47cb33df609e6673234 8492 rt4-db-mysql_4.0.7-2_all.deb
 17392667dd4e2a42a9454187eb2e75b5a8f1ae1d 8584 rt4-db-sqlite_4.0.7-2_all.deb
Checksums-Sha256: 
 8e99958aac1af7aa34eb2a18042c2c4051a4efa1b68a5dc59eb631c2369a7fe5 2112 request-tracker4_4.0.7-2.dsc
 d49a6167534fcce11df414ace0147d78071cc0bef969693368daa3683eb7b95d 75914 request-tracker4_4.0.7-2.debian.tar.gz
 830cd75336df1437353c1194d2c67a2222d8cbbb18da7cc3b49ef666ad516010 3953688 request-tracker4_4.0.7-2_all.deb
 68e55a175e618cda4b71ad5c083a25bbd6f9dac35874c8798603297f3246e108 46748 rt4-clients_4.0.7-2_all.deb
 8ee372fab6d734e49917a78c418845c19f880778012eecd2a33b9478d298227c 10362 rt4-fcgi_4.0.7-2_all.deb
 3f09d7762ff344293d9fc8280f6f7aa8df5a15a841a6fd9107da97700100824f 9296 rt4-apache2_4.0.7-2_all.deb
 ece062cd343b38a42abd1d8e2299a7374a96d2203fa75ec99b5af7ec9fb934e7 8494 rt4-db-postgresql_4.0.7-2_all.deb
 d3526ca10f5f0d38436f9254350760e47f1a7b16572245e453e32379de1186a0 8492 rt4-db-mysql_4.0.7-2_all.deb
 c011195e23e6305698833d745d19a62fa8bbb3d733fa55e449f6867dcb9422dc 8584 rt4-db-sqlite_4.0.7-2_all.deb
Files: 
 dfbebe07b2e4d12e5bc0a3f73b2fb36c 2112 misc optional request-tracker4_4.0.7-2.dsc
 f16ee6865a2d101a44839e23ab53e32d 75914 misc optional request-tracker4_4.0.7-2.debian.tar.gz
 96b07e389e1bf86b875ad6cf18556e4b 3953688 misc optional request-tracker4_4.0.7-2_all.deb
 708971283aa7418974a572f918b21c22 46748 misc optional rt4-clients_4.0.7-2_all.deb
 132e35852f9e8d85228dce2e0e6a8c90 10362 misc optional rt4-fcgi_4.0.7-2_all.deb
 9f38a6b2328464e29d82da4fb20cacaa 9296 misc optional rt4-apache2_4.0.7-2_all.deb
 bd1650224a9e0f98da5a5eb0647ca5a3 8494 misc optional rt4-db-postgresql_4.0.7-2_all.deb
 8a87cd7e3021369e28d26027dc4dd0de 8492 misc optional rt4-db-mysql_4.0.7-2_all.deb
 152479fa6707a154fec30433b9ace630 8584 misc optional rt4-db-sqlite_4.0.7-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFQhmvxYzuFKFF44qURAgwfAJ9K9NJcJGPS9YrX2ECQu836+kjr/gCfRvMP
H9dUN5sB2Cbm9XNo4LHYmE4=
=jQY0
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.