it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
[IT-SecurityNotifies] [announce] OTRS Security Advisory 2010-02: OTRS 2.4.8 (Aitutaki Beach)
Chronologisch Thread
- From: Hauke Böttcher <hauke.boettcher AT otrs.com>
- To: announce AT otrs.org
- Subject: [IT-SecurityNotifies] [announce] OTRS Security Advisory 2010-02: OTRS 2.4.8 (Aitutaki Beach)
- Date: Wed, 15 Sep 2010 14:32:26 +0200
- List-archive: <https://service.piratenpartei.de/pipermail/it-securitynotifies>
- List-id: Sicherheitsankündigungen <it-securitynotifies.lists.piratenpartei.de>
Dear Community Members,
++++++++++ OTRS Security Advisory 2010-01 OTRS 2.4.8 ++++++++++
Release: OTRS 2.4.8
Status: stable
Code Name: Aitutaki Beach
SECURITY FIXES:
===============
===============
---------------------------------------------------------------
---------------------------------------------------------------
ID: OSA-2010-02
Date: 2010-09-15
Title: Multiple XSS and denial of service vulnerabilities
Severity: Less critical
Product: OTRS 2.4.x, OTRS 2.3.x
Fixed in: OTRS 2.4.8, OTRS 2.3.6
CVE: CVE-2010-2080
---------------------------------------------------------------
To read the entire Security Advisory please follow this link:
ENGLISH VERSION:
GERMAN VERSION:
ENHANCEMENTS:
============
============
* Updated Czech translation, thanks to O2BS.com, s r.o.
Jakub Hanus!
* Updated Portuguese Brazilian translation file, thanks to
Fabricio Luiz Machado!
* Updated Ukrainian language translation, thanks to
Belskii Artem!
* Updated Danish translation, thanks to Jesper Rønnov,
Faaborg-Midtfyn Kommune!
BUG FIXES:
==========
==========
* Bug# 4658 - Can't delete attachment from AdminAttachment
interface.
* Bug# 4889 - Inline images from Lotus Notes were not displayed
in the ticket zoom.
* Bug# 4977 - mod_perl was not used on Fedora when using RPM.
* Bug# 4967 - Object method "new" could not be located by package
error when using Perl 5.10.1.
* Bug# 5094 - Bulk pending date/time was not applied to tickets.
* Bug# 5164 - Pending time was not working if agent was located
in a different timezone.
* Bug# 4786 - AgentTicketCompose ONLY: when assigning a next
state and adding an attachment, the next state was
reseted until the next screen refresh.
* Bug# 4999 - Cache for customer user was not refreshed when a
preference was updated.
* Bug# 5242 - New lines were not displayed in HTML notification
mails on Lotus Notes.
* Bug# 5210 - LinkQuote generated high CPU load when processing
a large volume of data.
* Bug# 5742 - Outgoing email link detection was not working
properly.
* Bug# 5132 - New owner validation always asked to set an owner.
MD5 CHECKSUMS:
==============
==============
70baf24a67c5f248080ad50f0c19d77f
SOFTWARE DOWNLOAD:
===================
Please note that we have relaunched our website www.otrs.com.
The software can now be downloaded exclusively
A complete list of all download mirrors (ftp/http/rsync) is
available at http://otrs.org/download/YOUR CONTRIBUTION:
===================
* Please send information regarding vulnerabilities in OTRS to
* We kindly ask for your assistance to update the translation
files! The current status can be found here:
FEEDBACK & BUG REPORTING:
=========================
Although OTRS 2.4.8 has been tested before, we appreciate
your contributions. As always, you’re encouraged to tell
or by filing a bug in Bugzilla [http://bugs.otrs.org].
--
Hauke Jan Böttcher
Director Marketing
OTRS AG
Norsk-Data-Straße 1
61352 Bad Homburg
Germany
T: +49 (0) 6172 681988 0
F: +49 (0) 9421 56818 18
I: http://www.otrs.com/
Business Location: Bad Homburg
Country Court: Bad Homburg, HRB 10751
VAT ID: DE256610065
Chairman: Burchard Steinbild
Managing Board: André Mindermann (CEO)
Hauke Jan Böttcher
Director Marketing
OTRS AG
Norsk-Data-Straße 1
61352 Bad Homburg
Germany
T: +49 (0) 6172 681988 0
F: +49 (0) 9421 56818 18
I: http://www.otrs.com/
Business Location: Bad Homburg
Country Court: Bad Homburg, HRB 10751
VAT ID: DE256610065
Chairman: Burchard Steinbild
Managing Board: André Mindermann (CEO)
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/announce
---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/announce
- [IT-SecurityNotifies] [announce] OTRS Security Advisory 2010-02: OTRS 2.4.8 (Aitutaki Beach), Hauke Böttcher, 15.09.2010
Archiv bereitgestellt durch MHonArc 2.6.19.