From: ftpmaster@ftp-master.debian.org 
  
 -----BEGIN PGP SIGNED MESSAGE----- 
 Hash: SHA512 
  
 Format: 1.8 
 Date: Wed, 08 Oct 2025 20:40:55 +1300 
 Source: request-tracker5 
 Binary: request-tracker5 rt5-apache2 rt5-clients rt5-db-mysql rt 
 -db-postgresql rt5-db-sqlite rt5-doc-html rt5-fcgi rt5-standalone 
 Architecture: source all 
 Version: 5.0.3+dfsg-3~deb12u4 
 Distribution: bookworm-security 
 Urgency: medium 
 Maintainer: Andrew Ruthven  
 Changed-By: Andrew Ruthven  
 Description: 
  request-tracker5 - extensible trouble-ticket tracking system 
  rt5-apache2 - Apache 2 specific files for request-tracker5 
  rt5-clients - mail gateway and command-line interface to request-tracker5 
  rt5-db-mysql - MySQL database backend for request-tracker5 
  rt5-db-postgresql - PostgreSQL database backend for request-tracker5 
  rt5-db-sqlite - SQLite database backend for request-tracker5 
  rt5-doc-html - HTML documentation for request-tracker5 
  rt5-fcgi   - External FastCGI support for request-tracker5 
  rt5-standalone - Standalone web server support for request-tracker5 
 Changes: 
  request-tracker5 (5.0.3+dfsg-3~deb12u4) bookworm-security; urgency=medium 
  . 
    * Apply upstream patch which fixes a security vulnerability. 
      - [CVE-2025-61873] Fix CSV injection via ticket values with special 
        characters that are exported to a TSV from search results. 
 Checksums-Sha1: 
  aba95fd2489cf1d99d9b5d3b33b62d2edeed9e35 6209 request-tracker5_ 
 .0.3+dfsg-3~deb12u4.dsc 
  ef0b663b6363cabf3845f7f6bd5b508d66b0929e 3217706 request-tracke 
 5_5.0.3+dfsg.orig-third-party-source.tar.gz 
  4f043bd95000923aa8189403b73f52b720c534de 18601901 request-track 
 r5_5.0.3+dfsg.orig.tar.gz 
  307b425a830f9ff3df679e2d365a02a8c566bdcb 455 request-tracker5_5 
 0.3+dfsg.orig.tar.gz.asc 
  69494fb153d7097522554f6fc056220090b1a28c 169400 request-tracker 
 _5.0.3+dfsg-3~deb12u4.debian.tar.xz 
  af8986f81c164ec2e8c59d352b51b9dd5199b775 12053744 request-track 
 r5_5.0.3+dfsg-3~deb12u4_all.deb 
  78dcbcdd164045378a195f7346be4497c1a61c4f 24705 request-tracker5 
 5.0.3+dfsg-3~deb12u4_amd64.buildinfo 
  e76b2acf7d0f71bccadfe07f7119a09e36e3756e 21048 rt5-apache2_5.0. 
 +dfsg-3~deb12u4_all.deb 
  b88a61b35f777e85032b8e9d1a46fcb18a146ddb 53380 rt5-clients_5.0. 
 +dfsg-3~deb12u4_all.deb 
  9f7e463df01204e540a268847c47fbc5579889de 20360 rt5-db-mysql_5.0 
 3+dfsg-3~deb12u4_all.deb 
  99258be3abbfc4f3c850a800d5874bd73476416b 20348 rt5-db-postgresq 
 _5.0.3+dfsg-3~deb12u4_all.deb 
  7ec5ec8b2a3acc44acba3261d259ce1aabffa076 20452 rt5-db-sqlite_5. 
 .3+dfsg-3~deb12u4_all.deb 
  6d4549babf2fc2c262690f6fa605b2e81a983df1 4438580 rt5-doc-html_5 
 0.3+dfsg-3~deb12u4_all.deb 
  293da7bfcb417892f10625da4b01241a44ac3b65 23108 rt5-fcgi_5.0.3+d 
 sg-3~deb12u4_all.deb 
  b43d156bc5d557d3eb6c4373cb4fb886e811f0d8 19820 rt5-standalone_5 
 0.3+dfsg-3~deb12u4_all.deb 
 Checksums-Sha256: 
  6555d863d663813eeb36b38999ea0e3fd6f503a4060a316afcfe6a10157912fa 6209 
 request-tracker5_5.0.3+dfsg-3~deb12u4.dsc 
  49b856ff23be2f5265c7b3460ac3d49ef24e4462b8165d39fbb12b7776d0e66a 3217706 
 request-tracker5_5.0.3+dfsg.orig-third-party-source.tar.gz 
  e23aee3cb291ccad5e521aeabe0fcd2f076bcfa8b7f801af498a7505e53d8441 18601901 
 request-tracker5_5.0.3+dfsg.orig.tar.gz 
  6cfc32a9bf2d09768a5ac2b103f21d6675dfc3490c06190562296e5b2082ccce 455 
 request-tracker5_5.0.3+dfsg.orig.tar.gz.asc 
  5f973f84b924f666471dd87b1e3385e7e3e041ffdc3c4abaf4dce9e1599fc200 169400 
 request-tracker5_5.0.3+dfsg-3~deb12u4.debian.tar.xz 
  c90001928292f8539f038067511513bd1a33038aa03c7b1c23009d22c3eaff2b 12053744 
 request-tracker5_5.0.3+dfsg-3~deb12u4_all.deb 
  6a3542cf67abf5d95a8ec8ea35b9a8776ba4be08c3ae9df48f91c5ae7f7178f0 24705 
 request-tracker5_5.0.3+dfsg-3~deb12u4_amd64.buildinfo 
  744e20f692d09967318461694b34996fcbca1ee1e71003aad9c5cfb19ae71319 21048 
 rt5-apache2_5.0.3+dfsg-3~deb12u4_all.deb 
  049e5fd2dd2905d8b7d5e478769423d9d894baaeb1118494906b481d4d0b38b2 53380 
 rt5-clients_5.0.3+dfsg-3~deb12u4_all.deb 
  1cdc33a65e267588b031a188dd7f4bca57d8396b8ba4f3bb89926be5dda51ce2 20360 
 rt5-db-mysql_5.0.3+dfsg-3~deb12u4_all.deb 
  618e816f54e9816423999c75517307065fc279ab77efc4a071a3e056722acd51 20348 
 rt5-db-postgresql_5.0.3+dfsg-3~deb12u4_all.deb 
  7e692fd6047062ca6e13303b3ed41e55709035f71aaa92aacd7ba433f51bad8c 20452 
 rt5-db-sqlite_5.0.3+dfsg-3~deb12u4_all.deb 
  b9f33405fc310738917c7fff6734a2b5fa864612558d2a581e796e40fdde0183 4438580 
 rt5-doc-html_5.0.3+dfsg-3~deb12u4_all.deb 
  159c4a36c1fbcd533e6874e1fe6993d4e77bc638eb0a43a0bca45ca994e54ca9 23108 
 rt5-fcgi_5.0.3+dfsg-3~deb12u4_all.deb 
  11a30095c5ef7e5ace163084304ce790b2f0a55a865f16c837fdd8ed8d17fbe1 19820 
 rt5-standalone_5.0.3+dfsg-3~deb12u4_all.deb 
 Files: 
  921813fb24912ca3a4e1700a2a5a076c 6209 misc optional request-tra 
 ker5_5.0.3+dfsg-3~deb12u4.dsc 
  7e052f0715b42102e6387f6e398a6e87 3217706 misc optional request- 
 racker5_5.0.3+dfsg.orig-third-party-source.tar.gz 
  ec8a8fc2fbbf1ccebb4825ca0e2aeac5 18601901 misc optional request 
 tracker5_5.0.3+dfsg.orig.tar.gz 
  f52489a073fb418b7bc68a6bb672299e 455 misc optional request-trac 
 er5_5.0.3+dfsg.orig.tar.gz.asc 
  2c797c2cf1ea38557f16ab3ba343fb7b 169400 misc optional request-t 
 acker5_5.0.3+dfsg-3~deb12u4.debian.tar.xz 
  7e80f0c7d6aae24b4f405cb6afa6bec2 12053744 misc optional request 
 tracker5_5.0.3+dfsg-3~deb12u4_all.deb 
  078f1423a2f7714a2347d97f4d0aafea 24705 misc optional request-tr 
 cker5_5.0.3+dfsg-3~deb12u4_amd64.buildinfo 
  2f7b3496408dd5722cb8fa992124b489 21048 misc optional rt5-apache 
 _5.0.3+dfsg-3~deb12u4_all.deb 
  951f298d72a0711c0c4508b39fc48a37 53380 misc optional rt5-client 
 _5.0.3+dfsg-3~deb12u4_all.deb 
  1a3e1ac7e411ef541c0a34773056b645 20360 misc optional rt5-db-mys 
 l_5.0.3+dfsg-3~deb12u4_all.deb 
  7ce2d19d9c254befce021c16c3ca11dd 20348 misc optional rt5-db-pos 
 gresql_5.0.3+dfsg-3~deb12u4_all.deb 
  
 [continued in next message] 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)