[IT-SecNots] [announce] Release Note: iPhoneHandle 1.0.3 & iPhoneHandle 0.9.7

[Martin Edenhofer <martin AT otrs.org>]

Release:                  iPhoneHandle 1.0.9
Required OTRS release:    OTRS Help Desk 3.0.x
Recommended OTRS release: OTRS Help Desk 3.0.9
Status:                   stable

Release:                  iPhoneHandle 0.9.7
Required OTRS release:    OTRS Help Desk 2.4.x
Recommended OTRS release: OTRS Help Desk 2.4.10
Status:                   stable


Selected Bugfixes
=================
* Security Advisory OSA-2011-02
  * Vulnerability in OTRS iPhoneHandle interface allows user with valid session privilege escalation
  * Severity: Critical
  * Product: iPhoneHandle 1.0.x (OTRS 3.0), iPhoneHandle 0.9.x (OTRS 2.4)
  * Fixed in: iPhoneHandle 1.0.3 (OTRS 3.0), iPhoneHandle 0.9.7 (OTRS 2.4)
  * URL: http://otrs.org/advisory/OSA-2011-02-en/
  * CVE: CVE-2011-2385

List of Files and MD5 Message digest (128-bit) checksums

========================================================

1a520dc848cfccb7417d176ecd6eab02

[ http://ftp.otrs.org/pub/otrs/packages/iPhoneHandle-1.0.3.opm ] 

8817cf21424f42db5cea0a9ea095b34e

[ http://ftp.otrs.org/pub/otrs/packages/iPhoneHandle-0.9.7.opm ] 

Feedback & Bug Reporting
=========================
We appreciate your contributions! As always, you are re encouraged to
tell us what you think, using this feedback e-Mail: [feedback at
otrs.org] or by filing a bug in Bugzilla [ http://bugs.otrs.org ].


Professional Services
======================
OTRS Group provides a full set of services for each phase of
deployment. Plan, custom engineer, deploy and scale with confidence by
relying on our unparalleled expertise. [ http://www.otrs.com/en/services/ ]


Community Services
==================
* User Forums
[ http://forums.otrs.org/ ]

* Mailing Lists
[ http://lists.otrs.org/ ]

* Knowledge Database (FAQ)
[ http://faq.otrs.org/ ]

* Brainstorm / Ideas
[ http://otrsteam.ideascale.com/ ]

--

Martin Edenhofer
  OTRS.org Founder

OTRS AG
Europaring 4
94315 Straubing

T: +49 (0)9421 56818 0
F: +49 (0)9421 56818 18
I: www.otrs.com

Business location: Bad Homburg, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065
Chairman: Burchard Steinbild, Managing Board: André Mindermann

---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/announce