it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Salvatore Bonaccorso <carnil AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 5909-1] request-tracker5 security update
- Date: Wed, 30 Apr 2025 21:26:03 +0000
- Authentication-results: lists.piratenpartei.de; dkim=none; dmarc=none; spf=none (lists.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"
- List-archive: https://lists.debian.org/msgid-search/E1uAEwN-007QdP-RL AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=IiAkiQ6qOhFi3UWf2pIZTfzr/5V4l+2JJAlSBqOf8aA=; b=dY O7jieaEXI0WdG1UHUu1ZnMsuMTmfxYwETzE5juX3EEmiR7xYOPHt1Vw+E2TntU8NJl1B1lCMvFfNr jg8BeTS3dceCXpfFgsS+H/ygNy+735ds+lngxLQTW+Z7y3eoE6tQHk9MAxl/OosQOwlFgxClWKfaU EoIE9fKuMPRjCI09h02eZOxWVbR2r4EW6pYpCl6rmOC0aK0aFJW6dGKJwR6uuhzyd6doir7Mu0AR2 yQhnnlw48jFcn9Do0h9ezjhaS1WOYjq4Oop/dM+NEIHN/ftwltqvVV3kv7LF+AfI+CxnxesYt8yri rB8GZSZBQvFsv7mpNUzh9izVIXCsmLDw==;
- Old-return-path: <carnil AT seger.debian.org>
- Priority: urgent
- Resent-date: Wed, 30 Apr 2025 21:26:48 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <j549QRfV1kM.A.PuHN.YWpEoB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5909-1 security AT debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
April 30, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : request-tracker5
CVE ID : CVE-2024-3262 CVE-2025-2545 CVE-2025-30087 CVE-2025-31500
CVE-2025-31501
Debian Bug : 1068453
Multiple vulnerabilities have been discovered in Request Tracker, an
extensible trouble-ticket tracking system, which could result in
information disclosure, cross-site scripting and use of weak encryption
for S/MIME emails.
For the stable distribution (bookworm), these problems have been fixed
in version 5.0.3+dfsg-3~deb12u3.
We recommend that you upgrade your request-tracker5 packages.
For the detailed security status of request-tracker5 please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/request-tracker5
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=many
-----END PGP SIGNATURE-----
-
[IT-SecNots] [SECURITY] [DSA 5909-1] request-tracker5 security update,
Salvatore Bonaccorso, 30.04.2025
- <Mögliche Wiederholung(en)>
- [IT-SecNots] [SECURITY] [DSA 5909-1] request-tracker5 security update, Salvatore Bonaccorso, 30.04.2025
Archiv bereitgestellt durch MHonArc 2.6.19+.