August 2021 - devel - lists.freelock.com

Bug#982109: ledgersmb: new upstream releases
by Chris Hofstaedtler 22 Jan '22

22 Jan '22

Source: ledgersmb Version: 1.6.9+ds-1 Severity: wishlist Hi, Upstream has made numerous new upstream releases since 1.6.9. From what I can tell there's an 1.8.x branch already. Please consider packaging new versions. Chris

3 3

LedgerSMB 1.9.0-beta1 released
by Erik Huelsmann 12 Sep '21

12 Sep '21

Hi all, Yesterday, I've uploaded the first beta for LedgerSMB 1.9.0 (ledgersmb-1.9.0-beta1). This release is available for download from https://download.ledgersmb.org/f/Beta%20Releases/1.9.0-beta1/ Or as a docker image with the command $ docker pull ledgersmb/ledgersmb:1.9.0-beta1 This beta is a feature complete version of ledgersmb-1.9.0 made available for testing and evaluation. Please send any bug reports, questions or surprises to the developers mailing list at devel(a)lists.ledgersmb.org or create an issue in the GitHub Issue tracker at https://github.com/ledgersmb/LedgerSMB/issues The 1.9.0 release has an impressive list of changes, available in the Changelog file at https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog#L6-L90 ; if you have any questions regarding the items listed, please feel free to join the LedgerSMB chat channel at https://app.element.io/#/room/#ledgersmb:matrix.org or post your question to the developers mailing list. -- Bye, Erik. http://efficito.com -- Hosted accounting and ERP. Robust and Flexible. No vendor lock-in.

1 1

Bug#992817: ledgersmb: CVE-2021-3693 CVE-2021-3694 CVE-2021-3731
by Salvatore Bonaccorso 01 Sep '21

01 Sep '21

Source: ledgersmb Version: 1.6.9+ds-2 Severity: grave Tags: security upstream Justification: user security hole X-Debbugs-Cc: carnil(a)debian.org, Debian Security Team <team(a)security.debian.org> Control: found -1 1.6.9+ds-1 Control: fixed -1 1.6.9+ds-1+deb10u2 Control: fixed -1 1.6.9+ds-2+deb11u2 Hi, The following vulnerabilities were published for ledgersmb. CVE-2021-3693[0]: | LedgerSMB does not check the origin of HTML fragments merged into the | browser's DOM. By sending a specially crafted URL to an authenticated | user, this flaw can be abused for remote code execution and | information disclosure. CVE-2021-3694[1]: | LedgerSMB does not sufficiently HTML-encode error messages sent to the | browser. By sending a specially crafted URL to an authenticated user, | this flaw can be abused for remote code execution and information | disclosure. CVE-2021-3731[2]: | LedgerSMB does not sufficiently guard against being wrapped by other | sites, making it vulnerable to 'clickjacking'. This allows an attacker | to trick a targetted user to execute unintended actions. If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2021-3693 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3693 [1] https://security-tracker.debian.org/tracker/CVE-2021-3694 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3694 [2] https://security-tracker.debian.org/tracker/CVE-2021-3731 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3731 Please adjust the affected versions in the BTS as needed. Regards, Salvatore

2 2

ledgersmb_1.6.9+ds-2+deb11u3_amd64.changes ACCEPTED into proposed-updates->stable-new
by Debian FTP Masters 31 Aug '21

31 Aug '21

Mapping stable-security to proposed-updates. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Aug 2021 15:19:14 +0200 Source: ledgersmb Architecture: source Version: 1.6.9+ds-2+deb11u3 Distribution: bullseye-security Urgency: medium Maintainer: LedgerSMB Core Team <devel(a)lists.ledgersmb.org> Changed-By: Moritz Muehlenhoff <jmm(a)debian.org> Changes: ledgersmb (1.6.9+ds-2+deb11u3) bullseye-security; urgency=medium . * Fix a regression in the display of some search results Checksums-Sha1: 8fd5dd9a18165c22620ac9db83f5987b17c2edf2 3265 ledgersmb_1.6.9+ds-2+deb11u3.dsc 508725785247f8dce475c381b97c2c1245ce8076 38332 ledgersmb_1.6.9+ds-2+deb11u3.debian.tar.xz de527f1284cc5c0544c7be6ff97ec4a4d3135cec 15403 ledgersmb_1.6.9+ds-2+deb11u3_amd64.buildinfo Checksums-Sha256: 583984855c0b04ee20e32013016deb671519a8e97e35eca091f1b9dbefa1d193 3265 ledgersmb_1.6.9+ds-2+deb11u3.dsc da1aa64aacfd8f6836ade3e28d1f0a67e478c80db82c98b7a2b1699639f19eaa 38332 ledgersmb_1.6.9+ds-2+deb11u3.debian.tar.xz 72b46a983f0303ce007548539aed9c9dc76028d09f360d301ea4cab8c553fadd 15403 ledgersmb_1.6.9+ds-2+deb11u3_amd64.buildinfo Files: 8c6c6dde19d574ddb2444566b9fb1e71 3265 web optional ledgersmb_1.6.9+ds-2+deb11u3.dsc ae68c5012a260dc2499fe4059649f73d 38332 web optional ledgersmb_1.6.9+ds-2+deb11u3.debian.tar.xz a819f275b2f6b45dab9efeb946ca5cc4 15403 web optional ledgersmb_1.6.9+ds-2+deb11u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmEs3lQACgkQEMKTtsN8 TjaptQ/8C6B2lIStWLqp1pOdglwKGIkTLEY0tAbnVZ4k/DOPWy35t5l73e4f18+R oYyTHEv1R+p7KiWAky4tIZJgS5q1AaV8w+D0VMTa6mXAMyfMYybkvILu7m+BFs0u agc9AsV7FNq+wNQoOeViRRkoOYnSgHPPm9b3Qs1v8T1aIaxOZylpCOdCR9lwZycW IbYCT8bOBqt3iuObyklSBW2SPpLcDjiguFXkrkY5BC9QAK2Xce4g/h43jqH0yKws Tul1dZw03o8lC5EQMFyXd+tntB3kMcBZ5yj0jrFtknYSRxfY7fnUVzDSaR4lPw77 V5rhqBVeWaCw0lqbPV2jEwaWm2xzA78SIbOX7wdNsKcwDaoaDVL5BtsA0W0nXY+L 8SYVh8oJl8GcEQn9+5UduEbT3Ro82ErXMQgdeVXTTsiZOO1xsdVaEWYAgIrZqcR7 NQlRXNXEbPu3P523HJfg6uDEhUwUmnQV1PunES5E//0woc57Fb385XNL0bJtcLHL po2wFIlHMMgvr1ZmHc3NNQLNRnHWzhrQFRoM2Cs1OJbKYkDRqDRjjk4NzHRZhHnY VBOXzRsf3iJHAsIEzI6upSHLDGD7r/9L/6qxm2O+hnoN+tErG/DHdMba5RDZExuQ CJGGmbXKOrTiTO61g6U2zM8J+5juHNnnCrWFHfXLo8GfNwtAzN0= =zw21 -----END PGP SIGNATURE----- Thank you for your contribution to Debian.

1 0

ledgersmb_1.6.9+ds-1+deb10u3_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new
by Debian FTP Masters 31 Aug '21

31 Aug '21

Mapping oldstable-security to oldstable-proposed-updates. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Aug 2021 15:13:23 +0200 Source: ledgersmb Architecture: source Version: 1.6.9+ds-1+deb10u3 Distribution: buster-security Urgency: medium Maintainer: LedgerSMB Core Team <devel(a)lists.ledgersmb.org> Changed-By: Moritz Muehlenhoff <jmm(a)debian.org> Changes: ledgersmb (1.6.9+ds-1+deb10u3) buster-security; urgency=medium . * Fix a regression in the display of some search results Checksums-Sha1: ebccf2c871bd2197b1e0ac309e5dd40e5c6f0922 3265 ledgersmb_1.6.9+ds-1+deb10u3.dsc 0908e81665237c357eaa2008ab4d6ae71653425a 38220 ledgersmb_1.6.9+ds-1+deb10u3.debian.tar.xz b2259c998ccaaa22d72cb814d7945fbeaefdd4d0 15094 ledgersmb_1.6.9+ds-1+deb10u3_amd64.buildinfo Checksums-Sha256: 66c241afb732c84a2acc7404b93c0861a2102962aa494bc5d9b6fa4da4506af3 3265 ledgersmb_1.6.9+ds-1+deb10u3.dsc 19c0288b007acf0c282ee02f6f65b4bb8a1d374e3292444016ee2d475d990933 38220 ledgersmb_1.6.9+ds-1+deb10u3.debian.tar.xz c1329758a3ff731c4cba2b375fcc97fb404fc2f25c8514a970fc6cdf12b5bbb8 15094 ledgersmb_1.6.9+ds-1+deb10u3_amd64.buildinfo Files: 84543a9de0999ce58a91dfee4ca6d211 3265 web optional ledgersmb_1.6.9+ds-1+deb10u3.dsc e475daabfbc222d55401d4ddf0376a5b 38220 web optional ledgersmb_1.6.9+ds-1+deb10u3.debian.tar.xz be158058bb1cac4f6b887f50fa7aa195 15094 web optional ledgersmb_1.6.9+ds-1+deb10u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmEs3C4ACgkQEMKTtsN8 Tjbi0Q/+PVUa3LutIzJ3XAu/Q6jbaiQiMQpGirwpmFS2ot9m7Ul9WHdXmZZWyZZn YVd/GzODn2DVynXfEZvMFvJkQN0zX5uiInK0Fs/y6FFe9mxkSDYUohs3GwhGbPcL vyhbGAYBMcUbU5W1oYU+TQJS8W3ptwss2MwijPml/ln9YXnEDdp605mX4C0G1z+e lNvNeUfmKjicsdXvUn+Pxf3EU/XgESmSuaDVUu2U+/w/rkxri2bMmclHzcy1Uyot fej0wKCAgO9Qxjw4ubukvsEJAKps3sEyJWKjroRKX+H8td6Aw4vgDqlsChXLtACr BCWpU0Kh7pUWLfeS0FHgTlCVsV1xNWznAEslxvx58hDZrg7EYDYPMap1zQMGRkCk CRq3ltsK6OLqIbowd3h6x/239iq4es/lEtw2HsS3SizWjF72Qzml+20PC2ZS1fuQ j+PmStsVLcgTEsjnPCeKBFiyDpeu8Tb2ZxQz16G7d0FXxA1Q2e/U5YhEQ7kQ/hQq GPZa2uuVj/gD4ge41e26Bqgnqeqt/q9VNoSK4QMp87YypQ7k2yR1lKTQMPEQu9y2 LCsTCrTEQHj7THor7nHbs7E2kiUXyS2Akz9HIb1i1xluNBFLzDy/1hPsljJR3q64 8lWkmuBwELu4lPkR4ab+j/QM7exmER0gIdqlm1KwFg2R1K7xpXM= =k6Jh -----END PGP SIGNATURE----- Thank you for your contribution to Debian.

1 0

ledgersmb_1.6.9+ds-1+deb10u2_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
by Debian FTP Masters 27 Aug '21

27 Aug '21

Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Aug 2021 20:54:25 +0200 Source: ledgersmb Architecture: source Version: 1.6.9+ds-1+deb10u2 Distribution: buster-security Urgency: medium Maintainer: LedgerSMB Core Team <devel(a)lists.ledgersmb.org> Changed-By: Moritz Muehlenhoff <jmm(a)debian.org> Changes: ledgersmb (1.6.9+ds-1+deb10u2) buster-security; urgency=medium . * Fix CVE-2021-3731, thanks for Erik Huelsmann Checksums-Sha1: 81dff0043e075588fffb234efda4b78b641f5449 3265 ledgersmb_1.6.9+ds-1+deb10u2.dsc 851b39c25748d2a780895f8c2a450b94e53ac31e 37796 ledgersmb_1.6.9+ds-1+deb10u2.debian.tar.xz a3db94b57cf7fcdedaf9197ed8be469f2e673934 15094 ledgersmb_1.6.9+ds-1+deb10u2_amd64.buildinfo Checksums-Sha256: bc167a97c2e63a4c72882bb7d82a39cf79b56f51c3dabd330713922a5b4c7c2d 3265 ledgersmb_1.6.9+ds-1+deb10u2.dsc aef28aa91470f89a51ad87f14e8f6da13c9a79340fd96124a0e5f5c77ab80120 37796 ledgersmb_1.6.9+ds-1+deb10u2.debian.tar.xz bff4d79e7d88353b98a696bd2b6f16b3064c3e3716c4b401a4e19375c383dd5c 15094 ledgersmb_1.6.9+ds-1+deb10u2_amd64.buildinfo Files: 0fd6e172a26caf3ba19491665415ad32 3265 web optional ledgersmb_1.6.9+ds-1+deb10u2.dsc 630ed153ca2cbdddaffee480eead3ea7 37796 web optional ledgersmb_1.6.9+ds-1+deb10u2.debian.tar.xz 8349333bfcf81badb8b633d401c949e6 15094 web optional ledgersmb_1.6.9+ds-1+deb10u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmEiol4ACgkQEMKTtsN8 Tjaj6Q//emxljrNJ/qkzrLegCv8Cx/cprXTvhilk2ql45OI74n4hNeYV6LLoVJWs T2VaG+QQSjHUXA18YSWhumHJdQc15Z5FlGD1QxgDuQh9yzLkonXthI6vykGbDsSs 1Fb6FYHBXphz5q5rLbFdqlaoVEcalKJpaMPNDZxh61Z9KjAiOIiUmPTKDxecz8Ro nL2E6UjyoKeX64CtVGT/jd2QOFXK6ego21oYFZZxGsHU5hPwqlC5f1aYXec6nBNz PGMSsvuQoBkVzkjjeqpELeu+TzniVD3savNNYLwbEB0ghEFsVJV7AvREkAG0/6WD Gi1+f3WG//WJfqLTQqniVw5tDEkso7fSJXPkXp2hv1yQ4fCBnGbfGtEw5sQnMIKe 5ZjmhNg9SbWXYP7Q3s9j/IFXsgXhfdumzYW/ym+TIcOEcXtPewbJ4qS9YFy3+4vR aksSOMqeOQBYYS8cWoSk9xlt/01MU2XTrxlIMPZbKztoE5UbYi2eYTDSu7gjc3Rn 6AqcaU1vIkcTEC/2BpnQJwizIPpwTyN86INWMa3XSFKMIy1HAJ41zWEDN/BOoAI5 DDe0vGkjqs3o6JQ5rRfxXq9Y3PkXiWmvI2FKRsVVNPZn0yao4TCEAKVWZKc8Xo9s MtA6N4bnky8RDQPsmIDwKd9O8BvuN9VAkf17V8vgEYx89JMxooA= =hShF -----END PGP SIGNATURE----- Thank you for your contribution to Debian.

1 0

ledgersmb_1.6.9+ds-1+deb10u1_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
by Debian FTP Masters 27 Aug '21

27 Aug '21

Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 19 Aug 2021 21:04:51 +0200 Source: ledgersmb Architecture: source Version: 1.6.9+ds-1+deb10u1 Distribution: buster-security Urgency: medium Maintainer: LedgerSMB Core Team <devel(a)lists.ledgersmb.org> Changed-By: Moritz Muehlenhoff <jmm(a)debian.org> Changes: ledgersmb (1.6.9+ds-1+deb10u1) buster-security; urgency=medium . * Fix CVE-2021-3693 and CVE-2021-3694, thanks to Erik Huelsmann Checksums-Sha1: 3669a256a11320037b67c0b2f129c4e691ee0325 3265 ledgersmb_1.6.9+ds-1+deb10u1.dsc efa19d0a485ff3b7795b8ce965fdedb6ad37d20e 1961328 ledgersmb_1.6.9+ds.orig.tar.xz 872d9d026f228229d0208216a7a2f0e13094aa30 37608 ledgersmb_1.6.9+ds-1+deb10u1.debian.tar.xz ca78d7a16fcae63d1d4d1178b4bf8598bf2f690a 15094 ledgersmb_1.6.9+ds-1+deb10u1_amd64.buildinfo Checksums-Sha256: 0ae418267d121a9a7d08723ca5333794a6196891613760355c038765dbb1f894 3265 ledgersmb_1.6.9+ds-1+deb10u1.dsc 7e29702482dd84ab30caf176bbdf56b7069db488b36c921b4ff57878ab1b579b 1961328 ledgersmb_1.6.9+ds.orig.tar.xz 4e00afff36715a9f43e3e0b3ddbcb4f17844c2df5ff8da0b36d10e638bceff29 37608 ledgersmb_1.6.9+ds-1+deb10u1.debian.tar.xz 0dbcaabcf453d5dbf3bd67c84539b9aabbafa7f050df75d64ff0b2d2bcf38bec 15094 ledgersmb_1.6.9+ds-1+deb10u1_amd64.buildinfo Files: 3830971b3cefbb644b940d61ba4ed749 3265 web optional ledgersmb_1.6.9+ds-1+deb10u1.dsc 1502debde292e73ab9e27e35c2f9fc23 1961328 web optional ledgersmb_1.6.9+ds.orig.tar.xz 11c73d8120d2d51a761d5b550da6c7ab 37608 web optional ledgersmb_1.6.9+ds-1+deb10u1.debian.tar.xz e1c38e333c7f604c155f74a2dcca7b76 15094 web optional ledgersmb_1.6.9+ds-1+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmEerfQACgkQEMKTtsN8 TjYzBhAAl04KouFB15/h6vQx9IN5x4eD6CEmJ22KkeDMiw1J95b34aMPubVT4oKa sGp4y8DMeRF68Etz5FIKt3yiQm21u8/znwgXbKjHW4AsPTn0AkLMJgzmpGpauKHG 1MH3+8JF8SS5J5h4IXX7fQ4aZSz1EEaBZ7A9m/aNt2c5pQqhr58DtMV05ShTeA0j rMCevaS6qNCIwWNiCAuAylvGNMpMFtSHrrYSIX2aiBF8gdPv4TXX4FxeZhH1wYWp qQh4ugZzDP3PBUA8zU6KJtc5HR60xG+4ZDQn+7oviH1984kRpX6St4IvzPaBjd1f c1bfWAvdF84+Io1r0rSu6dshxqXALvpQYzyQe5rRgSic7AMhDahs9fBDWCW5iQ6K NoZ5f5OWWRb1uHbZrPXz/YIb/IrAw3HF2sfAZNaNXFT4wsn++urAoJ9m+sEtFBI5 +EJ9o+YrzGRPU4Kjj9e619u+VkhMdW4LEJKZzpqQyNug3we61ryyqLb4b0OizDsy xMb9DqbtxDpCMqIaTyzUvMyHdHToWhPir/K9fIo0X35Mbvmo6H/0f0jh8qdEOwp0 KG6+7qysj56hWrJnMUKNMkeGRRO36QDtH7SEGu/1CndYX1/QWGMqxYJ4e2FWc7O5 mnGufYVZ8aOIxgrHS5vFokpJ3iIXgDE69Wcnk/fHPHTXCs9H70Q= =hb6q -----END PGP SIGNATURE----- Thank you for your contribution to Debian.

1 0

ledgersmb_1.6.9+ds-2+deb11u1_amd64.changes ACCEPTED into proposed-updates->stable-new, proposed-updates
by Debian FTP Masters 27 Aug '21

27 Aug '21

Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 19 Aug 2021 21:02:41 +0200 Source: ledgersmb Architecture: source Version: 1.6.9+ds-2+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: LedgerSMB Core Team <devel(a)lists.ledgersmb.org> Changed-By: Moritz Muehlenhoff <jmm(a)debian.org> Changes: ledgersmb (1.6.9+ds-2+deb11u1) bullseye-security; urgency=medium . * Fix CVE-2021-3693 and CVE-2021-3694, thanks to Erik Huelsmann Checksums-Sha1: 6358d0205896d5495af0d10afd0278662805c2f7 3265 ledgersmb_1.6.9+ds-2+deb11u1.dsc efa19d0a485ff3b7795b8ce965fdedb6ad37d20e 1961328 ledgersmb_1.6.9+ds.orig.tar.xz 012e22908ac7aa864d55b18e04c1781630e0ab1c 37688 ledgersmb_1.6.9+ds-2+deb11u1.debian.tar.xz 58b08afd4dc63418ff250ee10622691f12b963c1 15403 ledgersmb_1.6.9+ds-2+deb11u1_amd64.buildinfo Checksums-Sha256: 3a528065c4fb2f114758b7fc4858575745ff5c6c20e67488a8a9141e9d201393 3265 ledgersmb_1.6.9+ds-2+deb11u1.dsc 7e29702482dd84ab30caf176bbdf56b7069db488b36c921b4ff57878ab1b579b 1961328 ledgersmb_1.6.9+ds.orig.tar.xz d0e2d29e530156dd3320969bdffbdf7214548655d0cbef469f2402e72bd0b491 37688 ledgersmb_1.6.9+ds-2+deb11u1.debian.tar.xz 4c2842fac4587cfe794b1b391220e8854c8c7aa9200b3eb4d643f72a56c3fbf3 15403 ledgersmb_1.6.9+ds-2+deb11u1_amd64.buildinfo Files: 7b032e00006c0ef39aba509878dfa5be 3265 web optional ledgersmb_1.6.9+ds-2+deb11u1.dsc 1502debde292e73ab9e27e35c2f9fc23 1961328 web optional ledgersmb_1.6.9+ds.orig.tar.xz f2dc1cdf5b8a879712074217b1af6fd5 37688 web optional ledgersmb_1.6.9+ds-2+deb11u1.debian.tar.xz ad24d01a28bc6a1815c11eeef37915f7 15403 web optional ledgersmb_1.6.9+ds-2+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmEerboACgkQEMKTtsN8 TjZ0sg//doFqnweItuKlfSC1Sph7e9640dTDufWJMM2wbaXrv6+Nu1yzU1W4V924 8eGFvS6byTl1alaaqHbwBnnf8qUkByl0Ik/21C9WRjFpehEhzyD/E9HtHMPbcA53 hORO44tLu4DqDv8GzBPA2OqfZ3B1E9VQZVurTkiJ7EiN1YYwJxiKL890WlbI4C21 +rh5PXdoiGVKKO7XGZbBu4zLi1R4prqp+ZS/X1X8o0egBvg3wttgt9bcxemHklmF zN9SaV3VQgbu7NUf02GdnUQir+AEVuBRCYBKK4j3qJKuDMQfjfoKoiWGDWQI5414 0TuTFc6sWLWjKeeb1YeJQL+u/zG0T3072sJx493xE2TlWYRmWDLen8p2fTpBs+Xi oVhErEaqpNPt12Y+IjvD1J8+7QnftHPU6mu6A2TlByZRlJoqT1nhn1IRk53GxBWv ghTF/+ytZgPUeJtFGoGyGDD3zlV8A08/JXs3odgxB30NQ5eNHmNUasx87oFF6c4b EpqmK9oBh9Xecg4BBeAu4C3U6HUOGpbUrBOCe+CC/9O6SSHdEUN2mGR6Qx/DZd6R snXWxZbxGXWIbyKxDLa3ozzrH6zOK/pHO3zRO8EjuWmRzCGXcDHfKylnrKiSCj7F XV3ymOK4HmtwF41b1RUylBfITjs/xlZGKqpBhpPufOnlx8/Y0MI= =KrHn -----END PGP SIGNATURE----- Thank you for your contribution to Debian.

1 0

ledgersmb_1.6.9+ds-2+deb11u2_amd64.changes ACCEPTED into proposed-updates->stable-new, proposed-updates
by Debian FTP Masters 27 Aug '21

27 Aug '21

Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Aug 2021 20:58:22 +0200 Source: ledgersmb Architecture: source Version: 1.6.9+ds-2+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: LedgerSMB Core Team <devel(a)lists.ledgersmb.org> Changed-By: Moritz Muehlenhoff <jmm(a)debian.org> Changes: ledgersmb (1.6.9+ds-2+deb11u2) bullseye-security; urgency=medium . * Fix CVE-2021-3731, thanks to Erik Huelsmann Checksums-Sha1: 1caa4a12de710bccd847c072d8a506324ce0a15b 3265 ledgersmb_1.6.9+ds-2+deb11u2.dsc 5cf961dc46eb35dd90b7eb150a08c733df8cfd22 37856 ledgersmb_1.6.9+ds-2+deb11u2.debian.tar.xz 8cc837669f71379c38e4e04e2f67f7409dc80f90 15403 ledgersmb_1.6.9+ds-2+deb11u2_amd64.buildinfo Checksums-Sha256: 3566ceca633c5b303878fa7514371b91efba39bf56e358401d231466ee8b9c23 3265 ledgersmb_1.6.9+ds-2+deb11u2.dsc cd5107b0d44919ae9688660c09606b3eb1dc1bac4ae4c5a88ad217f337494700 37856 ledgersmb_1.6.9+ds-2+deb11u2.debian.tar.xz f4125f7b988c70a436f5827adf261d7e3ec0f4094e9c44c38fc4f83f8276c2e2 15403 ledgersmb_1.6.9+ds-2+deb11u2_amd64.buildinfo Files: 2a7d93f94ca34d0e93ecaed95450f48a 3265 web optional ledgersmb_1.6.9+ds-2+deb11u2.dsc 2c7143557b2245b2d9845a9bd2914bb6 37856 web optional ledgersmb_1.6.9+ds-2+deb11u2.debian.tar.xz 5e6a533dbd1618edda2898e1ff65ae07 15403 web optional ledgersmb_1.6.9+ds-2+deb11u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmEiojAACgkQEMKTtsN8 TjbEMRAAgMWAf1hUttem/G3KH9/mO3AwTCbd6Ta8vemOi4oCgK/nCDX/PgIvmRTf Px/RcdkuGVD1n9cM1uZggHtLnN0FN36sP/QdH/p+dtxpSuJ8OH1hXLPOGrgR8mWL 8u3IPwdrNMzcGCLtPWpf23Hf9rQRm/y1cwpuQJeFiwq5hf2jR0V56rgga2c1IMJf qDULyTjCMdalNF3xYbKhxG2IA7jQZjELsc/i3EWKXyMo4BQvMWDWKqMqaOzJ8+yy MXJi8BRCE/0CvMGrM5sFLWaOOzgCEjWNx6FYKl7kW5H8tJUdB1HpKFfvqqe8lDpi OPumZ8PhQ3a2B7nYp21NCjUfAFacoRYgXu6w/j3RgHC+6Kdllpm7hhhc58AYebHT VST9wdzvFV/BGDYYBM3HgcWocgD0oaTgNnKxyi1sbvnkr131GUuz97sRDv2RUu19 jk62FvmmKwgVSUErAygZt8PyVyyUQawveaPJAo8p0AaAjg0iN24O7px/LPO/R99P RcjnylOuZFVgxbY4v1afazO63YVki6iI3M9j2Tnx7bGDhXwEDjbk5TxypMamctK3 MvI+5hBLR9JCENVURLT3e4Kblzl6dz4VHT/piNCSyHucLYcgHtMwxsfXEZKOvOuO S4LpBhzToECtO+UPWtD/ql4hlmPjShAI0aAgQmHfgzLKmBfuZZE= =yY+z -----END PGP SIGNATURE----- Thank you for your contribution to Debian.

1 0

LedgerSMB 1.8.19 released
by Erik Huelsmann 25 Aug '21

25 Aug '21

Unfortunately, the fixes for the security vulnerabilities released on Monday August 23 regressed some functionalities. This release fixes those regressions: Changelog for 1.8.19 * Follow-up for the fix to CVE-2021-3693; fix bulk-posting payments * Follow-up for the fix to CVE-2021-3693; fix incorrectly backported change For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.8.19/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.8.19 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.8.19 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.8.19 These are the sha256 checksums of the uploaded files: 4f818690b39a974680c6264727ddf3ab445a5db780294cad407869d54ed1fb0c ledgersmb-1.8.19.tar.gz ffc79cb40181b2cf94fcda63afdfaa2b63fd1703502a86f4bbb76a7bfdcb37a0 ledgersmb-1.8.19.tar.gz.asc

1 0