Publishing details

Changelog

request-tracker4 (4.2.8-3+deb8u1build0.15.04.1) vivid-security; urgency=medium

  * fake sync from Debian

request-tracker4 (4.2.8-3+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Add CVE-2015-5475.patch patch.
    CVE-2015-5475: Cross-site scripting attack via the user and group rights
    managment pages.
  * Add XSS-cryptography-interface.patch patch.
    Fixes cross-site scripting attack via the cryptography interface.

 -- Steve Beattie <email address hidden>  Mon, 21 Sep 2015 15:28:58 -0700

Available diffs

Builds

Package files