Hi, Would you be happy to see a proposed update to fix these two (relatively minor - not reported by users in Debian) regressions as a DSA, or do you think this would be better handled as a s-p-u upload?
Cheers, Dominic. ----- Forwarded message from Dominic Hargreaves <d...@earth.li> ----- Date: Fri, 31 Aug 2012 22:17:02 +0100 From: Dominic Hargreaves <d...@earth.li> To: sub...@bugs.debian.org Subject: [request-tracker-maintainers] Bug#686392: Regressions in recent security releases X-Spam-Status: No, score=-4.4 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED, RP_MATCHES_RCVD autolearn=ham version=3.3.1 Resent-From: Dominic Hargreaves <d...@earth.li> Resent-To: debian-bugs-dist@lists.debian.org Resent-Date: Fri, 31 Aug 2012 21:48:02 +0000 User-Agent: Mutt/1.5.20 (2009-06-14) Reply-To: Dominic Hargreaves <d...@earth.li>, 686...@bugs.debian.org X-Urchin-Spam-Score-Int: -43 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.2 Package: request-tracker3.8 Version: 3.8.8-7+squeeze4 Severity: important It would be nice to fix these functional regressions in squeeze. ----- Forwarded message from Kevin Falcone <falc...@bestpractical.com> ----- Date: Mon, 27 Aug 2012 12:41:05 -0400 From: Kevin Falcone <falc...@bestpractical.com> To: rt-annou...@lists.bestpractical.com Subject: [rt-announce] RT 3.8.14 Released X-Spam-Status: No, score=-4.4 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED, RP_MATCHES_RCVD autolearn=ham version=3.3.1 Resent-From: Dominic Hargreaves <dominic.hargrea...@oucs.ox.ac.uk> Resent-Date: Thu, 30 Aug 2012 10:49:18 +0100 Resent-To: d...@larted.org.uk User-Agent: Mutt/1.5.20 (2009-06-14) X-Urchin-Spam-Score-Int: -43 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.2 I'm happy to announce that RT 3.8.14 is now available. http://download.bestpractical.com/pub/rt/release/rt-3.8.14.tar.gz http://download.bestpractical.com/pub/rt/release/rt-3.8.14.tar.gz.sig SHA1 sums 0ea5e7598e9bf75156629f6358192b6f62035f8a rt-3.8.14.tar.gz 49d1cf9e280edd23e9c467c80adc48922eb959fb rt-3.8.14.tar.gz.sig This release contains two fixes related to the 3.8.12 security release. Access to search results URLs is now CSRF whitelisted, based on user feedback. An error in rt-email-dashboards has been corrected. A complete changelog is available from git by running: git log rt-3.8.13..rt-3.8.14 or on github with https://github.com/bestpractical/rt/compare/rt-3.8.13...rt-3.8.14 _______________________________________________ rt-announce mailing list rt-annou...@lists.bestpractical.com http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-announce ----- End forwarded message ----- -- Dominic Hargreaves | http://www.larted.org.uk/~dom/ PGP key 5178E2A5 from the.earth.li (keyserver,web,email) _______________________________________________ pkg-request-tracker-maintainers mailing list pkg-request-tracker-maintain...@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-request-tracker-maintainers ----- End forwarded message ----- -- Dominic Hargreaves | http://www.larted.org.uk/~dom/ PGP key 5178E2A5 from the.earth.li (keyserver,web,email) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org