Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "request-tracker4", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-apache2", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-clients", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-db-mysql", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-db-postgresql", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-db-sqlite", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-doc-html", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-fcgi", "binary_version": "4.4.2-2ubuntu0.1~esm1" }, { "binary_name": "rt4-standalone", "binary_version": "4.4.2-2ubuntu0.1~esm1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "request-tracker4", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-apache2", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-clients", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-db-mysql", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-db-postgresql", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-db-sqlite", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-doc-html", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-fcgi", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" }, { "binary_name": "rt4-standalone", "binary_version": "4.4.3-2+deb10u3build0.20.04.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "request-tracker4", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-apache2", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-clients", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-db-mysql", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-db-postgresql", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-db-sqlite", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-doc-html", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-fcgi", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" }, { "binary_name": "rt4-standalone", "binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "request-tracker5", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-apache2", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-clients", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-db-mysql", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-db-postgresql", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-db-sqlite", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-doc-html", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-fcgi", "binary_version": "5.0.5+dfsg-2" }, { "binary_name": "rt5-standalone", "binary_version": "5.0.5+dfsg-2" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "request-tracker4", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-apache2", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-clients", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-db-mysql", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-db-postgresql", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-db-sqlite", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-doc-html", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-fcgi", "binary_version": "4.4.4+dfsg-2ubuntu2" }, { "binary_name": "rt4-standalone", "binary_version": "4.4.4+dfsg-2ubuntu2" } ] }