From: ftpmaster@ftp-master.debian.org 
  
 -----BEGIN PGP SIGNED MESSAGE----- 
 Hash: SHA512 
  
 Format: 1.8 
 Date: Wed, 08 Oct 2025 21:16:58 +1300 
 Source: request-tracker5 
 Binary: request-tracker5 rt5-apache2 rt5-clients rt5-db-mysql rt 
 -db-postgresql rt5-db-sqlite rt5-doc-html rt5-fcgi rt5-standalone 
 Architecture: source all 
 Version: 5.0.7+dfsg-4+deb13u1 
 Distribution: trixie-security 
 Urgency: medium 
 Maintainer: Andrew Ruthven  
 Changed-By: Andrew Ruthven  
 Description: 
  request-tracker5 - extensible trouble-ticket tracking system 
  rt5-apache2 - Apache 2 specific files for request-tracker5 
  rt5-clients - mail gateway and command-line interface to request-tracker5 
  rt5-db-mysql - MySQL database backend for request-tracker5 
  rt5-db-postgresql - PostgreSQL database backend for request-tracker5 
  rt5-db-sqlite - SQLite database backend for request-tracker5 
  rt5-doc-html - HTML documentation for request-tracker5 
  rt5-fcgi   - External FastCGI support for request-tracker5 
  rt5-standalone - Standalone web server support for request-tracker5 
 Changes: 
  request-tracker5 (5.0.7+dfsg-4+deb13u1) trixie-security; urgency=medium 
  . 
    * Apply upstream patch which fixes several security vulnerabilities: 
      - [CVE-2025-61873] Fix CSV injection via ticket values with special 
        characters that are exported to a TSV from search results. 
      - [CVE-2025-9158] Fix XSS via calendar invitations added to a ticket. 
 Checksums-Sha1: 
  68ef7dc492459031cf1b1ca221927d14923de8f8 6044 request-tracker5_ 
 .0.7+dfsg-4+deb13u1.dsc 
  602bc9baafdd591bcc3b17c344cb5f6f41cbd395 3271953 request-tracke 
 5_5.0.7+dfsg.orig-third-party-source.tar.gz 
  81da562fce8b328c3c257a26fa2ea80281b2f7e2 19782235 request-track 
 r5_5.0.7+dfsg.orig.tar.gz 
  3a4bd89084e42a5bdfc908f3bce363dba28aa986 131904 request-tracker 
 _5.0.7+dfsg-4+deb13u1.debian.tar.xz 
  d5b0db29f60de584ef13b5928e55470d47f603a8 12953616 request-track 
 r5_5.0.7+dfsg-4+deb13u1_all.deb 
  09e7769289a96c487005b5950e76bad54881e75d 25039 request-tracker5 
 5.0.7+dfsg-4+deb13u1_amd64.buildinfo 
  40ca4ac186ff92b2cd84270dafab1de08b58fd47 20444 rt5-apache2_5.0. 
 +dfsg-4+deb13u1_all.deb 
  f7fe04f71fb775da4188a622096ea0896aa82e59 50836 rt5-clients_5.0. 
 +dfsg-4+deb13u1_all.deb 
  06b23585f1cab4c9536b4447140443155cab2d95 19776 rt5-db-mysql_5.0 
 7+dfsg-4+deb13u1_all.deb 
  d8a533146478bbe24c58a5d31d98b540a922a8fb 19756 rt5-db-postgresq 
 _5.0.7+dfsg-4+deb13u1_all.deb 
  d37e40ebef682e9f0ed3ee0228836fca7b591edd 19876 rt5-db-sqlite_5. 
 .7+dfsg-4+deb13u1_all.deb 
  a190ad131114ca92ead5d63d0e41955d6a7a723a 5289040 rt5-doc-html_5 
 0.7+dfsg-4+deb13u1_all.deb 
  20fd63ab5d231570f666078618e2d4169fcf22c7 22600 rt5-fcgi_5.0.7+d 
 sg-4+deb13u1_all.deb 
  0363220b87c884261b62777ea67e818de9955efc 19236 rt5-standalone_5 
 0.7+dfsg-4+deb13u1_all.deb 
 Checksums-Sha256: 
  20313a163949b54df895737e55cd20388cdc2d361fe93537f88cce12058104ad 6044 
 request-tracker5_5.0.7+dfsg-4+deb13u1.dsc 
  88a059ec2a239f39f2a89d9df42b76b0860f35c0e484eb9eaba0adb9571b9d6f 3271953 
 request-tracker5_5.0.7+dfsg.orig-third-party-source.tar.gz 
  1a1a4838979f08c58e67642686e4fd980e1f4ee98e144ff8a56f870f37162cce 19782235 
 request-tracker5_5.0.7+dfsg.orig.tar.gz 
  f2e50b67cb4e47230457f4b1f5397a61c4ecb76ae2b670d90e1b4bf1bde03336 131904 
 request-tracker5_5.0.7+dfsg-4+deb13u1.debian.tar.xz 
  735c3315f3d0112a7c31221e51b95c0ce79edb17243cc7cfa03bb7864c6ca100 12953616 
 request-tracker5_5.0.7+dfsg-4+deb13u1_all.deb 
  b17bdc3bcab4736f36968fbde210967e5e41f1f6f240713c63eefda2c10efc5d 25039 
 request-tracker5_5.0.7+dfsg-4+deb13u1_amd64.buildinfo 
  d0e3b53e7099cd99133abdf147a3dade1c5849251b5ac183cfb559c37ee87e36 20444 
 rt5-apache2_5.0.7+dfsg-4+deb13u1_all.deb 
  e154a330ad54495ec9004940b5aec46c2a4d7d36d7a582de56f5e020750b7059 50836 
 rt5-clients_5.0.7+dfsg-4+deb13u1_all.deb 
  d7632e195502fb29f2e2a214acc07e7b2aea055ce1ebbc211a542fa4c1ed312f 19776 
 rt5-db-mysql_5.0.7+dfsg-4+deb13u1_all.deb 
  1b2ac2a513993f4fe042df02107f6d8491ac1b993fc05687325b1f56c10beca6 19756 
 rt5-db-postgresql_5.0.7+dfsg-4+deb13u1_all.deb 
  6118899cbc2427d1e22cb42e70865f08762e3b426059e9f5191b5c2633215775 19876 
 rt5-db-sqlite_5.0.7+dfsg-4+deb13u1_all.deb 
  c46a5a107aedeb06efa2d297e140e0cbc384f44595543dab29e7dcfe9111ed13 5289040 
 rt5-doc-html_5.0.7+dfsg-4+deb13u1_all.deb 
  d6c067c970f022f948ebf4340024f1e4707aea384955ae1fe07d13d3072c3e44 22600 
 rt5-fcgi_5.0.7+dfsg-4+deb13u1_all.deb 
  fd78ffb002a3d2988172a21c5838dbc5781948bf435a622aac1104b9e0cd1b76 19236 
 rt5-standalone_5.0.7+dfsg-4+deb13u1_all.deb 
 Files: 
  4752ef725903867fb135e1854dbd8150 6044 misc optional request-tra 
 ker5_5.0.7+dfsg-4+deb13u1.dsc 
  106021a3f34ed5960d28bdeea1b1bf37 3271953 misc optional request- 
 racker5_5.0.7+dfsg.orig-third-party-source.tar.gz 
  3465862785bbecb827e5cab426a0d5eb 19782235 misc optional request 
 tracker5_5.0.7+dfsg.orig.tar.gz 
  5f715b15ebc7dccd95c3695394abfeee 131904 misc optional request-t 
 acker5_5.0.7+dfsg-4+deb13u1.debian.tar.xz 
  2169116440ebc09b6599ccc1485d5b5f 12953616 misc optional request 
 tracker5_5.0.7+dfsg-4+deb13u1_all.deb 
  f5279e7e90e20658681e7faef6eac9da 25039 misc optional request-tr 
 cker5_5.0.7+dfsg-4+deb13u1_amd64.buildinfo 
  d2cef567c2ede7e78e01acc333737909 20444 misc optional rt5-apache 
 _5.0.7+dfsg-4+deb13u1_all.deb 
  5eb669d3e7f6559effb0f2a5e2783d96 50836 misc optional rt5-client 
 _5.0.7+dfsg-4+deb13u1_all.deb 
  840799d90c75d70bbacf1a3c8fb2423c 19776 misc optional rt5-db-mys 
 l_5.0.7+dfsg-4+deb13u1_all.deb 
  0d57185d604d8b9d8ff91dbfab124573 19756 misc optional rt5-db-pos 
 gresql_5.0.7+dfsg-4+deb13u1_all.deb 
  1bb20f382ba2ff0883830fc899913762 19876 misc optional rt5-db-sql 
 te_5.0.7+dfsg-4+deb13u1_all.deb 
  bfa5022f4cb8fa5aa99a90970600b842 5289040 doc optional rt5-doc-h 
 ml_5.0.7+dfsg-4+deb13u1_all.deb 
  
 [continued in next message] 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)