request-tracker4 (4.4.7+dfsg-1)
[PTS] [DDPO]
COMMITS: VCS has seen 26 commits since the debian/4.4.7+dfsg-1 tag
- Git: https://salsa.debian.org/request-tracker-team/request-tracker4.git
-
- Branch: master
- Path: debian/changelog
- Repo size: 897024
- Browser: https://salsa.debian.org/request-tracker-team/request-tracker4
- Last scan: 2024-03-26 14:28:10+00
- Next scan: 2024-04-04 11:53:00+00
- Merge requests: 1
- Debian changelog in Git:
request-tracker4 (4.4.7+dfsg-1) unstable; urgency=high
* New upstream release (Closes: #986707, #1054516).
- [CVE-2023-41259] Vulnerablility to unvalidated email headers in
incoming email and the mail-gateway REST interface.
- [CVE-2023-41260] Information leakage via response messages returned
from requests sent via the mail-gateway REST interface.
* Drop patches no longer needed:
- Update-tests-for-EN-datetime-locale-change-to-space.diff
- fix_expired_certs.dif
* Drop patches merged upstream:
- fcgi_client_sigpipe.diff
- libdatetime-format-natural-perl-v0.14.diff
* Set Multi-Arch: foreign for rt4-doc-html .
* Drop patch no_testdeps.diff now that we skip the Mozilla::CA check.
* Add autopkgtests.
* Include ::1 ACL for nginx config.
-- Andrew Ruthven <andrew@etc.gen.nz> Sun, 29 Oct 2023 22:36:22 +1300
- This branch is 26 commits ahead of tag debian/4.4.7+dfsg-1
- Git log:
commit 2268b94cde771debdf72184391ce78a870df0196
Merge: b287ac1 74dbf35
Author: Andrew Ruthven <andrew@etc.gen.nz>
Date: Sat Dec 23 01:02:37 2023 +1300
merge patched into master
commit 74dbf35a8430595fc3c9c3f99cfd6f9d6f27d186
Author: Andrew Ruthven <andrew@etc.gen.nz>
Date: Sat Oct 28 21:55:58 2023 +1300
Fix some spelling mistakes in POD
Not forwarding to upstream for RT 4.4, as this series is now only receiving
critical fixes.
Patch-Name: fix_spelling.diff
Forwarded: not-needed
commit 4f8cc2206658a5979061415941d9350269081dc7
Author: sunnavy <sunnavy@bestpractical.com>
Date: Tue Aug 29 14:19:47 2023 -0400
Update legacy timezones
Standard timezones generally follow the rule of using the geographical
region (continent or ocean) and city name.
The initial reason of this commit is Debian recently moved all old
timezones(like US/Eastern) to another package(tzdata-legacy), and it's
good to not introduce an additional, unnecessary dependency.
Fixes: I#37666
Patch-Name: fix_legacy_timezones.diff
Applied-Upstream: 5.0.5, commit:f2fb3e722dee9ccce830d8d0497a8dee1abee418
Origin: vendor
Forwarded: not-needed