[IT-SecNots] [announce] OTRS Security Advisory 2012-01 - OTRS 3.1.9

[Josephine Guenther <josephine.guenther AT otrs.com>]

+++++++++++++++++++++++++ OTRS Security Advisory 2012-01 OTRS 3.1.9 +++++++++++++++++++++++

Release: OTRS Help Desk 3.1.9

Release date: 22-August-2012

Status:                 Patch Level Release

SECURITY FIXES:

============== 

------------------------------------------------------------------

OTRS Security Advisory 2012-01 <security at otrs.org>

------------------------------------------------------------------

ID: OSA-2012-01

Date: 2012-08-22

Title: XSS vulnerability in Internet Explorer

Severity: less critical

Product:  OTRS 2.4.x, 3.0.x, 3.1.x, OTRS ITSM 3.1.x, 3.0.x, 2.1.x 

Fixed in:  OTRS 2.4.13, 3.0.15, 3.1.9, OTRS ITSM 3.1.6, 3.0.6, 2.1.5

URL:  http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/

CVE:  CVE-2012-2582 -------------------------------------------------------------------

To read the entire Security Advisory please follow this link.

http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/

There will also be Release Notes for the newest versions of OTRS Help Desk and OTRS ITSM, where this vulnerability is fixed and we recommend an update to one of these new versions.

Best regards 

Josephine Günther

----

Marketing Manager

OTRS AG

Norsk-Data-Straße 1

61352 Bad Homburg

Germany

 

T: +49 (0) 6172 681988 0

F: +49 (0) 9421 56818 18
I:  http://www.otrs.com/

Business location: Bad Homburg, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065
Chairman: Burchard Steinbild, Managing Board: André Mindermann (CEO), Christopher Kuhn, Sabine Riedel


Get Connected ! Everything in sync with OTRS 3.1
Be an early bird with our special offer: OTRS Help Desk 3.1 Special

---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/announce