UbuntuUpdates.org

Package "request-tracker5"

Name: request-tracker5

Description:

extensible trouble-ticket tracking system
Latest version: 5.0.7+dfsg-2ubuntu0.1
Release: plucky (25.04)
Level: security
Repository: universe
Homepage: https://bestpractical.com/rt/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "request-tracker5"

All arch deb package
APT INSTALL

Other versions of "request-tracker5" in Plucky

Repository Area Version
base universe 5.0.7+dfsg-2
updates universe 5.0.7+dfsg-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 5.0.7+dfsg-2ubuntu0.1 2025-08-13 20:07:11 UTC

  request-tracker5 (5.0.7+dfsg-2ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: Multiple security fixes
    - d/p/CVE-2025-2545_CVE-2025-30087_CVE-2025-31500_CVE-2025-
      31501.patch: Fix four security issues in RT.
    - debian/patches/CVE-2025-patchset-test-fix.patch: Fix test for
      2025-04-08 CVE patchset
    - debian/patches/CVE-2025-30087-regression.patch: Improve fix to
      CVE-2025-30087
    - CVE-2025-2545
    - CVE-2025-30087
    - CVE-2025-31500
    - CVE-2025-31501

 -- John Breton <email address hidden> Thu, 07 Aug 2025 12:20:28 -0400
CVE-2025-2545 Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to prot
CVE-2025-30087 Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.
CVE-2025-31500 Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.
CVE-2025-31501 Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.


About   -   Send Feedback to @ubuntu_updates