[IT-SecNots] [announce] OTRS Security Advisory 2017-02 & OTRS Security Advisory 2017-03 for OTRS 3.3.x, 4.0.x, 5.0.x.

[Goran Pismestrovic <goran.pismestrovic AT otrs.com>]

+++++++++ OTRS Security Advisory 2015-03 OTRS 3.3.x, 4.0.x, 5.0.x +++++++++

Releases: OTRS 3.3.17, 4.0.24, 5.0.20
Release date: 06-June-2017

Status:                 Patch Level Release

SECURITY FIXES:

============== 

------------------------------------------------------------------

OTRS Security Advisory 2017-03 <security at otrs.org>

------------------------------------------------------------------

ID:  OSA-2017-03

Date:  2017-06-06

Title:  Incorrect Access Control in OTRS

Severity:  High

Fixed in:  OTRS 3.3.17, 4.0.24, 5.0.20
URL:  https://www.otrs.com/security-advisory-2017-03-security-update-otrs-versions/

References:  CVE-2017-9324

To read the entire Security Advisory please follow this link.

https://www.otrs.com/security-advisory-2017-03-security-update-otrs-versions/

+++++++++ OTRS Security Advisory 2015-02 OTRS 3.3.x, 4.0.x, 5.0.x +++++++++

Releases: OTRS 3.3.17, 4.0.24, 5.0.20
Release date: 06-June-2017

Status:                 Patch Level Release

SECURITY FIXES:

============== 

------------------------------------------------------------------

OTRS Security Advisory 2017-02 <security at otrs.org>

------------------------------------------------------------------

ID:  OSA-2017-02

Date:  2017-06-06

Title:  Reflected cross-site scripting in OTRS

Severity:  3.4 (low)

Fixed in:  OTRS 3.3.17, 4.0.24, 5.0.20
URL:  https://www.otrs.com/security-advisory-2017-02-security-update-otrs-versions/

References: 

To read the entire Security Advisory please follow this link.

https://www.otrs.com/security-advisory-2017-02-security-update-otrs-versions/

Best regards,

Goran Pismestrovic
—
Marketing Manager

OTRS AG
Zimmersmühlenweg 11
61440 Oberursel 
Deutschland

T: +49 (0) 6172 681988 0
F: +49 (0) 9421 56818 18
I:  https://www.otrs.com/

Geschäftssitz: Oberursel, Amtsgericht: Bad Homburg, HRB 10751, USt.ID: DE256610065
Aufsichtsratsvorsitzender: Burchard Steinbild, Vorstand: André Mindermann (Vorsitzender), Christopher Kuhn, Sabine Riedel

Integrierter Kalender, komplett verschlüsselte Kommunikation und vieles mehr! Die neue OTRS 5s mit Features für OTRS Free, OTRS Business Solution™ und OTRS Business Solution™ Managed ist jetzt verfügbar! 

Mehr erfahren!

Attachment: signature.asc
Description: Message signed with OpenPGP

---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/mailman/listinfo/announce