• Bug#1104728: pre-approval: znuny/6.5.15-1

    From =?utf-8?q?Patrick_Matth=C3=A4i?=@21:1/5 to All on Mon May 5 13:10:01 2025
    XPost: linux.debian.devel.release

    UGFja2FnZTogcmVsZWFzZS5kZWJpYW4ub3JnClNldmVyaXR5OiBub3JtYWwKVXNlcjogcmVsZWFz ZS5kZWJpYW4ub3JnQHBhY2thZ2VzLmRlYmlhbi5vcmcKVXNlcnRhZ3M6IHVuYmxvY2sKWC1EZWJi dWdzLUNjOiB6bnVueUBwYWNrYWdlcy5kZWJpYW4ub3JnCkNvbnRyb2w6IGFmZmVjdHMgLTEgKyBz cmM6em51bnkKCkhlbGxvLAoKSSB3b3VsZCBsaWtlIHRvIGFzayBmb3IgYSBwcmUtYXBwcm92YWwg Zm9yIHpudW55IDYuNS4xNS0xLiBJIGhhdmUgdXBsb2FkZWQKaXQgZmlyc3QgdG8gZXhwZXJpbWVu dGFsLiBJdCBmaXhlcyB0d28gQ1ZFcyBhbmQgaXMgbWFpbmx5IGEgYnVnZml4IHJlbGVhc2U6CgoK ICAgIDIwMjUtMDQtMjQgRml4ZWQgYnVnIC0gU2V0dGluZyB0aGUgcGFzc3dvcmQgZG9lcyBub3Qg cmVzZXQgcHJlZmVyZW5jZXMgVXNlckxvZ2luRmFpbGVkIGFuZCBVc2VyTGFzdFB3Q2hhbmdlVGlt ZS4KICAgIDIwMjUtMDQtMTYgVXBkYXRlZCBOZXQ6OklNQVA6OlNpbXBsZSB0byBsYXRlc3QgdmVy c2lvbiBmcm9tIEdpdEh1Yi4gVGhhbmtzIHRvIEBkYW5kYW5wZW5hLiBQUiMxNTUKICAgIDIwMjUt MDQtMTYgRml4ZWQgYnVnIC0gJExheW91dE9iamVjdC0+QnVpbGREYXRlU2VsZWN0aW9uKCkgZG9l cyBub3QgZGVhY3RpdmF0ZSB0aGUgRGF0ZVBpY2tlciBhbmQgRGF0ZVBpY2tlckljb24gaWYgRGlz YWJsZWQgaXMgMS4gVGhhbmtzIGZvciByZXBvcnRpbmcgdG8gQEJ1aWxkZXJOU1YuICM2NDkKICAg IDIwMjUtMDQtMTEgQWRkZWQgb3B0aW9uIENjQWRkcmVzc1JlZ0V4cCB0byBwb3N0bWFzdGVyIGZp bHRlciBFeHRlcm5hbFRpY2tldE51bWJlclJlY29nbml0aW9uLgogICAgMjAyNS0wMy0yNyBBZGRl ZCBvcHRpb24gVG9BZGRyZXNzUmVnRXhwIHRvIHBvc3RtYXN0ZXIgZmlsdGVyIEV4dGVybmFsVGlj a2V0TnVtYmVyUmVjb2duaXRpb24uCiAgICAyMDI1LTAzLTI2IEFkZGVkIEdlcm1hbiBtZXNzYWdl IGZvciB0aWNrZXQgZXZlbnQgbm90aWZpY2F0aW9uICJ0aWNrZXQgZW1haWwgZGVsaXZlcnkgZmFp bHVyZSIuCiAgICAyMDI1LTAzLTI1IEZpeGVkIGJ1ZyAtIEluIEFkbWluUm9sZXMgY29tbWVudCBk aXNwbGF5IGZvciByb2xlcyBpcyB0b28gc2hvcnQuIENoYW5nZWQgVHJ1bmNhdGlvbiB0byA4MC4K ICAgIDIwMjUtMDMtMjAgQXJ0aWNsZSBkYXRhIG5vdyBhbHNvIGNvbnRhaW5zIGNvbW11bmljYXRp b24gY2hhbm5lbCBuYW1lIGluc3RlYWQgb2Ygb25seSB0aGUgSUQuCiAgICAyMDI1LTAzLTE5IEFk bWluU3lzdGVtQ29uZmlndXJhdGlvbjogQWRkb24gbmFtZSBpcyBubyBsb25nZXIgdHJhbnNsYXRl ZC4KICAgIDIwMjUtMDMtMTIgRml4ZWQgYnVnIC0gVGlja2V0OjpGcm9udGVuZDo6QXJ0aWNsZTo6 QWN0aW9ucyMjIz8/PyBubyBwb3NzaWJpbGl0eSB0byBhZGQgYSBuZXcgZW50cnkuCiAgICAyMDI1 LTAzLTA3IEZpeGVkIEdyb3VwU2VsZWN0aW9uIGluIEFkbWluQXBwb2ludG1lbnRDYWxlbmRhck1h bmFnZSBmb3IgYWRtaW4gZ3JvdXAgbWVtYmVyLiBBIHVzZXIgY2FuIG9ubHkgY3JlYXRlIEFwcG9p bnRtZW50Q2FsZW5kYXJzIGZvciB0aGVpciBvd24gZ3JvdXBzLCBldmVuIHRob3VnaCB0aGV5IGFy ZSBhIG1lbWJlciBvZiB0aGUgQWRtaW4gZ3JvdXAuCiAgICAyMDI1LTAzLTA1IENWRS0yMDI1LTQz OTI2OiBBZ2VudFByZWZlcmVuY2VzIG5vdyBvbmx5IHN1cHBvcnRzIGNvbmZpZ3VyZWQgdXNlciBw cmVmZXJlbmNlIGtleXMgKGluIEFnZW50UHJlZmVyZW5jZXM6OkFKQVhVcGRhdGU6OkFsbG93ZWRL ZXlzKSB0byBiZSB1cGRhdGVkIHZpYSBBSkFYIHJlcXVlc3QuIFRoYW5rcyB0byBUaW0gUMO8dHRt YW5ucyAobWF4ZW5jZSkgZm9yIHJlcG9ydGluZyB0aGUgaXNzdWUuCiAgICAyMDI1LTAzLTAzIElt cHJvdmVkIHBlcmZvcm1hbmNlIGluIEtlcm5lbDo6U3lzdGVtOjpMaW5rT2JqZWN0IGJ5IGZpeGlu ZyB0aGUgY2FjaGUga2V5LgogICAgMjAyNS0wMi0yOCBGaXhlZCBtaXNzaW5nIG5vdGlmaWNhdGlv biBpbiBwcm9jZXNzIG1hbmFnZW1lbnQgYWN0aXZpdHkgZGlhbG9nIGVkaXQgc2NyZWVuLgogICAg MjAyNS0wMi0yOCBGaXhlZCBkb3VibGVkIG5vdGlmaWNhdGlvbiBpbiBwcm9jZXNzIG1hbmFnZW1l bnQgdHJhbnNpdGlvbiBlZGl0IHNjcmVlbi4KICAgIDIwMjUtMDItMjcgRml4ZWQgb2Jzb2xldGUg cGFyYW1ldGVyIGluIG92ZXJ2aWV3IFVSTC4gQWZ0ZXIganVtcGluZyB0byBBZ2VudFRpY2tldFpv b20gZnJvbSBhbiBvdmVydmlldyBsaWtlIEFnZW50VGlja2V0U3RhdHVzIGFuZCByZXR1cm4gdG8g dGhhdCBvdmVydmlldyB0aGUgVVJMIHBhcmFtZXRlciBUaWNrZXRJRCBzdGF5cyBwZXJzaXN0ZW50 IHRvIHRoZSBVUkwuIFRoaXMgYWN0aW9uIGlzIHJlcGV0aXRpdmUgYW5kIHdvcmtzIHdpdGggbXVs dGlwbGUgVGlja2V0SURzLCBidXQgdGhlIFRpY2tldElEIGlzIG5vdCBuZWVkZWQgaW4gYW55d2F5 LgogICAgMjAyNS0wMi0yNiBBZGRlZCBvcHRpb24gdG8gZ2VuZXJpYyBpbnRlcmZhY2Ugb3BlcmF0 aW9ucyBUaWNrZXRDcmVhdGUgYW5kIFRpY2tldFVwZGF0ZSB0byBjb250cm9sIGlmIGEgc2lnbmF0 dXJlIHdpbGwgYmUgYXBwZW5kZWQgdG8gdGhlIHNlbnQgYXJ0aWNsZSdzIGJvZHkuCiAgICAyMDI1 LTAyLTI1IEFkZGVkIG1pc3NpbmcgRHluYW1pY0ZpZWxkU2NyZWVucyBjb25maWd1cmF0aW9uIGZv ciBMaW5rT2JqZWN0OjpDb21wbGV4VGFibGUjIyNUaWNrZXQuCiAgICAyMDI1LTAyLTI1IEltcHJv dmVkIER5bmFtaWNGaWVsZFVwZGF0ZSBmdW5jdGlvbiAtIEludGVybmFsRmllbGQgY2FuIG5vdyBi ZSBjaGFuZ2VkLiBJbnRlcm5hbEZpZWxkIGlzIG5ldmVyIHNldCB2aWEgdGhlIEdVSSAoZS5nLiBB ZG1pbkR5bmFtaWNGaWVsZFRleHQucG0pLiBJZiBpdCBpcyBzZXQgdmlhIHRoZSAiQmFja2VuZCIg Zm9yIGV4YW1wbGUgUGFja2FnZVNldHVwIGl0IHNob3VsZCBhbHNvIGJlIHBvc3NpYmxlIHRvIGNo YW5nZSB0aGUgJ0ludGVybmFsRmllbGQnIGFnYWluLgogICAgMjAyNS0wMi0yNSBGaXhlZCBBamF4 QXR0YWNobWVudC5wbSBidWcgLSBVc2Ugb2YgdW5pbml0aWFsaXplZCB2YWx1ZSBpbiBjb25jYXRl bmF0aW9uICguKSBvciBzdHJpbmcuCiAgICAyMDI1LTAyLTIxIEZpeGVkIGJyb2tlbiBkb2N1bWVu dGF0aW9uIGxpbmsgaW4gQUNMIEVkaXQgU2NyZWVuIGFuZCBjaGFuZ2VkIHRleHQgb2YgaGludC4K ICAgIDIwMjUtMDItMTQgQWRkZWQgY29uZmlndXJhYmxlIGxpbWl0IHRvIG51bWJlciBvZiB3YXRj aGVkIHRpY2tldHMgcGVyIHVzZXIuCiAgICAyMDI1LTAyLTEyIENWRS0yMDI1LTI2ODQ3IEZpeGVk IG1hc2tpbmcgb2YgcGFzc3dvcmRzIGluIHN1cHBvcnQgYnVuZGxlIGdlbmVyYXRvciBmb3IgbW9k aWZpZWQgc2V0dGluZ3MgWUFNTCBmaWxlLgoKU2luY2UgaXQgaXMgbm9uLWZyZWUgSSBob3BlIHRo aXMgc2hvdWxkIG5vdCBiZSBhIHByb2JsZW0uCgpDaGVlcnMK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sebastian Ramacher@21:1/5 to All on Tue May 6 16:30:01 2025
    XPost: linux.debian.devel.release

    Control: tags -1 confirmed

    On 2025-05-05 13:06:13 +0200, Patrick Matthäi wrote:
    Package: release.debian.org
    Severity: normal
    User: release.debian.org@packages.debian.org
    Usertags: unblock
    X-Debbugs-Cc: znuny@packages.debian.org
    Control: affects -1 + src:znuny

    Hello,

    I would like to ask for a pre-approval for znuny 6.5.15-1. I have uploaded
    it first to experimental. It fixes two CVEs and is mainly a bugfix release:


    2025-04-24 Fixed bug - Setting the password does not reset preferences UserLoginFailed and UserLastPwChangeTime.
    2025-04-16 Updated Net::IMAP::Simple to latest version from GitHub. Thanks to @dandanpena. PR#155
    2025-04-16 Fixed bug - $LayoutObject->BuildDateSelection() does not deactivate the DatePicker and DatePickerIcon if Disabled is 1. Thanks for reporting to @BuilderNSV. #649
    2025-04-11 Added option CcAddressRegExp to postmaster filter ExternalTicketNumberRecognition.
    2025-03-27 Added option ToAddressRegExp to postmaster filter ExternalTicketNumberRecognition.
    2025-03-26 Added German message for ticket event notification "ticket email delivery failure".
    2025-03-25 Fixed bug - In AdminRoles comment display for roles is too short. Changed Truncation to 80.
    2025-03-20 Article data now also contains communication channel name instead of only the ID.
    2025-03-19 AdminSystemConfiguration: Addon name is no longer translated.
    2025-03-12 Fixed bug - Ticket::Frontend::Article::Actions###??? no possibility to add a new entry.
    2025-03-07 Fixed GroupSelection in AdminAppointmentCalendarManage for admin group member. A user can only create AppointmentCalendars for their own groups, even though they are a member of the Admin group.
    2025-03-05 CVE-2025-43926: AgentPreferences now only supports configured user preference keys (in AgentPreferences::AJAXUpdate::AllowedKeys) to be updated via AJAX request. Thanks to Tim Püttmanns (maxence) for reporting the issue.
    2025-03-03 Improved performance in Kernel::System::LinkObject by fixing the cache key.
    2025-02-28 Fixed missing notification in process management activity dialog edit screen.
    2025-02-28 Fixed doubled notification in process management transition edit screen.
    2025-02-27 Fixed obsolete parameter in overview URL. After jumping to AgentTicketZoom from an overview like AgentTicketStatus and return to that overview the URL parameter TicketID stays persistent to the URL. This action is repetitive and works
    with multiple TicketIDs, but the TicketID is not needed in anyway.
    2025-02-26 Added option to generic interface operations TicketCreate and TicketUpdate to control if a signature will be appended to the sent article's body.
    2025-02-25 Added missing DynamicFieldScreens configuration for LinkObject::ComplexTable###Ticket.
    2025-02-25 Improved DynamicFieldUpdate function - InternalField can now be changed. InternalField is never set via the GUI (e.g. AdminDynamicFieldText.pm). If it is set via the "Backend" for example PackageSetup it should also be possible to change
    the 'InternalField' again.
    2025-02-25 Fixed AjaxAttachment.pm bug - Use of uninitialized value in concatenation (.) or string.
    2025-02-21 Fixed broken documentation link in ACL Edit Screen and changed text of hint.
    2025-02-14 Added configurable limit to number of watched tickets per user.
    2025-02-12 CVE-2025-26847 Fixed masking of passwords in support bundle generator for modified settings YAML file.

    Since it is non-free I hope this should not be a problem.

    ACK, please go ahead.

    Cheers
    --
    Sebastian Ramacher

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)