From bernd.maus at otrs.com Fri Jan 10 09:15:05 2020 From: bernd.maus at otrs.com (Bernd Maus) Date: Fri, 10 Jan 2020 10:15:05 +0100 Subject: [announce] ((OTRS)) Community Edition 6.0.25, ((OTRS)) Community Edition 5.0.40, OTRS::ITSM 6.0.25, OTRS::ITSM 5.0.40, OTRS Survey 6.0.16, OTRS SystemMonitoring 6.0.10, OTRS SystemMonitoring 5.0.08, OTRS MasterSlave 6.0.21 In-Reply-To: References: Message-ID: Dear community members, we are proud to announce today the release of ((OTRS)) Community Edition 6.0.25, ((OTRS)) Community Edition 5.0.40, OTRS::ITSM 6.0.25, OTRS::ITSM 5.0.40, OTRS Survey 6.0.16, OTRS SystemMonitoring 6.0.10, OTRS SystemMonitoring 5.0.08, OTRS MasterSlave 6.0.21 Thank you for helping to improve ((OTRS)) Community Edition. +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: (OTRS)) Community Edition 6 Patch Level 25 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-community-edition-6-patch-level-25 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download." +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: ((OTRS)) Community Edition 5s Patch Level 40 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-community-edition-5s-patch-level-40 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download." +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS::ITSM 6.0.25 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrsitsm-module-6-patch-level-25 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS::ITSM 5.0.40 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrsitsm-module-5s-patch-level-40 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download." +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Survey 6 Patch Level 16 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-survey-6-patch-level-16 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS SystemMonitoring 6.0.10 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-systemmonitoring-6-patch-level-10 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS SystemMonitoring 5.0.08 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-systemmonitoring-5-patch-level-8 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS MasterSlave 6 Patch Level 21 Release date: 10-January 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-masterslave-6-patch-level-21 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? Bernd Maus ? Online Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Deutschland T: +49 6172 681988-44 F: +49 9421 56818-18 I: https://www.otrs.com/ Gesch?ftssitz: Oberursel, Amtsgericht: Bad Homburg, HRB 10751, USt.ID: DE256610065 Aufsichtsratsvorsitzender: Burchard Steinbild, Vorstand: Andr? Mindermann (Vorsitzender), Christopher Kuhn, Sabine Riedel OTRS 7 | Automation ? Agilit?t ? Kommunikation ? Transparenz Erfahren Sie mehr OTRS ist SERVIEW CERTIFIEDTOOL. Bernd Maus ? Online Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-44 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 7 | Automation ? Agility ? Communication ? Transparency Find out more OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3867 bytes Desc: not available URL: From bernd.maus at otrs.com Fri Jan 10 09:15:18 2020 From: bernd.maus at otrs.com (Bernd Maus) Date: Fri, 10 Jan 2020 10:15:18 +0100 Subject: [announce] Security Advisory 2020-03, Security Advisory 2020-02, Security Advisory 2020-01 In-Reply-To: References: Message-ID: +++++++++ Security Advisory 2020-03: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, OTRS 6.0.x, Release date: 10-January-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-03 ------------------------------------------------------------------ ID: OSA-2020-03 Date: 2020-01-10 Title: Possible to send drafted messages as wrong agent Severity: 3.5 LOW Product: OTRS 7.0.x, OTRS 6.0.x Fixed in: OTRS 7.0.14, OTRS 6.0.25 References: CVE-2020-1767 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-03/ +++++++++ Security Advisory 2020-02: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, OTRS 6.0.x, OTRS 5.0.x Release date: 10-January-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-02 ------------------------------------------------------------------ ID: OSA-2020-02 Date: 2020-01-10 Title: Improper handling of uploaded inline images Severity: 2.0 LOW Product: OTRS 7.0.x, OTRS 6.0.x, OTRS 5.0.x Fixed in: OTRS 7.0.14, OTRS 6.0.25,, OTRS 5.0.40 References: CVE-2020-1766 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-02/ +++++++++ Security Advisory 2020-01: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, OTRS 6.0.x, OTRS 5.0.x Release date: 10-January-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-01 ------------------------------------------------------------------ ID: OSA-2020-01 Date: 2020-01-10 Title: Spoofing of From field in several screens Severity: 3.5. LOW Product: OTRS 7.0.x, OTRS 6.0.x, OTRS 5.0.x Fixed in: OTRS 7.0.14, OTRS 6.0.25,, OTRS 5.0.40 References: CVE-2020-1765 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-01/ Best regards Bernd Maus ? Online Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-44 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 7 | Automation ? Agility ? Communication ? Transparency Find out more OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3867 bytes Desc: not available URL: From sabrina.seubert at otrs.com Fri Feb 7 09:21:12 2020 From: sabrina.seubert at otrs.com (Sabrina Seubert) Date: Fri, 7 Feb 2020 10:21:12 +0100 Subject: [announce] Security Advisory 2020-05, Security Advisory 2020-04 References: Message-ID: <0D3D50F3-2F19-4543-976F-ABE66D008C84@otrs.com> +++++++++ Security Advisory 2020-05: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x Release date: 07-February-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-05 ------------------------------------------------------------------ ID: OSA-2020-05 Date: 2020-02-07 Title: Vulnerability in third-party library - jquery Severity: Medium Product: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x Fixed in: OTRS 7.0.15, ((OTRS)) Community Edition 6.0.26 References: CVE-2019-11358 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-05 +++++++++ Security Advisory 2020-04: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x Release date: 07-February-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-04 ------------------------------------------------------------------ ID: OSA-2020-04 Date: 2020-02-07 Title: External interface does not invalidate user session Severity: Medium Product: OTRS 7.0.x Fixed in: OTRS 7.0.15 References: CVE-2020-1768 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-04 With kind regards Sabrina Seubert ? Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-0 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 7 | Automation ? Agility ? Communication ? Transparency Find out more OTRS is a SERVIEW CERTIFIEDTOOL. --------------------------------------------------------------------- OTRS mailing list: announce - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/announce To unsubscribe: http://lists.otrs.org/mailman/listinfo/announce -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3863 bytes Desc: not available URL: From sabrina.seubert at otrs.com Fri Feb 7 09:26:32 2020 From: sabrina.seubert at otrs.com (Sabrina Seubert) Date: Fri, 7 Feb 2020 10:26:32 +0100 Subject: [announce] ((OTRS)) Community Edition 6 Patch Level 26, ((OTRS)) Community Edition 5s Patch Level 41, OTRS::ITSM Module 6 Patch Level 26, OTRS::ITSM Module 5s Patch Level 41, OTRS FAQ 6 Patch Level 24, OTRS FAQ 5 Patch Level 25, OTRS Survey 6 Patch Level 17, OTRS Survey 5 Patch Level 16, OTRS TimeAccounting 6 Patch Level 15, OTRS TimeAccounting 5 Patch Level 19, OTRS SystemMonitoring 6 Patch Level 11, OTRS SystemMonitoring 5 Patch Level 9, OTRS MasterSlave 6 Patch Level 22, OTRS MasterSlave 5 Patch Level 26, OTRS Clone DB 6 Patch Level 7, OTRS Clone DB 5 Patch Level 10, OTRS AppointmentCalendar 5 Patch Level 16 References: Message-ID: <46A99CE1-B21F-414B-8E83-8F049D623AFF@otrs.com> Dear community members, we are proud to announce today the release of ((OTRS)) Community Edition 6 Patch Level 26, ((OTRS)) Community Edition 5s Patch Level 41, OTRS::ITSM Module 6 Patch Level 26, OTRS::ITSM Module 5s Patch Level 41, OTRS FAQ 6 Patch Level 24, OTRS FAQ 5 Patch Level 25, OTRS Survey 6 Patch Level 17, OTRS Survey 5 Patch Level 16, OTRS TimeAccounting 6 Patch Level 15, OTRS TimeAccounting 5 Patch Level 19, OTRS SystemMonitoring 6 Patch Level 11, OTRS SystemMonitoring 5 Patch Level 9, OTRS MasterSlave 6 Patch Level 22, OTRS MasterSlave 5 Patch Level 26, OTRS Clone DB 6 Patch Level 7, OTRS Clone DB 5 Patch Level 10, OTRS AppointmentCalendar 5 Patch Level 16. +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: ((OTRS)) Community Edition 6 Patch Level 26 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-community-edition-6-patch-level-26 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: ((OTRS)) Community Edition 5s Patch Level 41 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-community-edition-5s-patch-level-41 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS::ITSM Module 6 Patch Level 26 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrsitsm-module-6-patch-level-26 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS::ITSM Module 5s Patch Level 41 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrsitsm-module-5s-patch-level-41 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS FAQ 6 Patch Level 24 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-faq-6-patch-level-24 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS FAQ 5 Patch Level 25 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-faq-5-patch-level-25 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Survey 6 Patch Level 17 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-survey-6-patch-level-17 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Survey 5 Patch Level 16 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/release-notes-otrs-survey-5-patch-level-16 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS TimeAccounting 6 Patch Level 15 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-timeaccounting-6-patch-level-15 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS TimeAccounting 5 Patch Level 19 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-timeaccounting-5-patch-level-19 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS SystemMonitoring 6 Patch Level 11 Release date: 07-February 2020 Status: Patch Level Read the entire release notes:https://community.otrs.com/otrs-systemmonitoring-6-patch-level-11 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS SystemMonitoring 5 Patch Level 9 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-systemmonitoring-5-patch-level-9 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS MasterSlave 6 Patch Level 22 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-masterslave-6-patch-level-22 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS MasterSlave 5 Patch Level 26 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-masterslave-5-patch-level-26 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Clone DB 6 Patch Level 7 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-clone-db-6-patch-level-7 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Clone DB 5 Patch Level 10 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-clone-db-5-patch-level-10 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS AppointmentCalendar 5 Patch Level 16 Release date: 07-February 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-appointmentcalendar-5-patch-level-16 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? With kind regards Sabrina Seubert ? Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-0 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 7 | Automation ? Agility ? Communication ? Transparency Find out more OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3863 bytes Desc: not available URL: From bernd.maus at otrs.com Fri Mar 27 09:13:33 2020 From: bernd.maus at otrs.com (Bernd Maus) Date: Fri, 27 Mar 2020 10:13:33 +0100 Subject: [announce] Security Advisory 2020-10, Security Advisory 2020-09, Security Advisory 2020-08, Security Advisory 2020-07, Security Advisory 2020-06 Message-ID: +++++++++ Security Advisory 2020-10: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Release date: 27-March-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-10 ------------------------------------------------------------------ ID: OSA-2020-10 Date: 2020-03-27 Title: Session / Password token leak Severity: 7.3 HIGH Product: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Fixed in: OTRS 7.0.16, ((OTRS)) Community Edition 6.0.27, ((OTRS)) Community Edition 5.0.42 References: CVE-2020-1773 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-10 +++++++++ Security Advisory 2020-09: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Release date: 27-March-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-09 ------------------------------------------------------------------ ID: OSA-2020-09 Date: 2020-03-27 Title: Information Disclosure Severity: 6.5 MEDIUM Product: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Fixed in: OTRS 7.0.16, ((OTRS)) Community Edition 6.0.27, ((OTRS)) Community Edition 5.0.42 References: CVE-2020-1772 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-09 +++++++++ Security Advisory 2020-08: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Release date: 27-March-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-08 ------------------------------------------------------------------ ID: OSA-2020-08 Date: 2020-03-27 Title: Possible XSS in Customer user address book Severity: 4.6 MEDIUM Product: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, Fixed in: OTRS 7.0.16, ((OTRS)) Community Edition 6.0.27, References: CVE-2020-1771 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-08 +++++++++ Security Advisory 2020-07: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Release date: 27-March-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-07 ------------------------------------------------------------------ ID: OSA-2020-07 Date: 2020-03-27 Title: Information disclosure in support bundle files Severity: 2.4 LOW Product: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Fixed in: OTRS 7.0.16, ((OTRS)) Community Edition 6.0.27, ((OTRS)) Community Edition 5.0.42 References: CVE-2020-1770 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-07 +++++++++ Security Advisory 2020-06: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Release date: 27-March-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-06 ------------------------------------------------------------------ ID: OSA-2020-06 Date: 2020-03-27 Title: Autocomplete in the form login screens Severity: 3.5 LOW Product: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition 5.0.x Fixed in: OTRS 7.0.16, ((OTRS)) Community Edition 6.0.27, ((OTRS)) Community Edition 5.0.42 References: CVE-2020-1769 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-06 Bernd Maus ? Online Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-44 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 8 | Fast ? Modern ? Secure Learn more. OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3867 bytes Desc: not available URL: From bernd.maus at otrs.com Fri Mar 27 09:18:36 2020 From: bernd.maus at otrs.com (Bernd Maus) Date: Fri, 27 Mar 2020 10:18:36 +0100 Subject: [announce] ((OTRS)) Community Edition 6.0.27, ((OTRS)) Community Edition 5.0.42, OTRS::ITSM 6.0.27, ITSM Module 5.0.42, OTRS FAQ 6.0.25, OTRS TimeAccounting 6.0.16, OTRS Survey 6.0.18, OTRS SystemMonitoring 6.0.12, OTRS MasterSlave 6.0.23, OTRS Clone DB 6.0.8 In-Reply-To: References: Message-ID: <1180B03A-DE35-478D-B62F-46B575324DE4@otrs.com> Dear community members, we are proud to announce today the release of ((OTRS)) Community Edition 6.0.27, ((OTRS)) Community Edition 5.0.42, OTRS::ITSM 6.0.27, ITSM Module 5.0.42, OTRS FAQ 6.0.25, OTRS TimeAccounting 6.0.16, OTRS Survey 6.0.18, OTRS SystemMonitoring 6.0.12, OTRS MasterSlave 6.0.23, OTRS Clone DB 6.0.8 +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: ((OTRS)) Community Edition 6 Patch Level 27 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-community-edition-6-patch-level-27 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: ((OTRS)) Community Edition 5s Patch Level 42 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-community-edition-5s-patch-level-42 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS::ITSM 6 Patch Level 27 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrsitsm-module-6-patch-level-27 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS::ITSM 5s Patch Level 42 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrsitsm-module-5s-patch-level-42 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS FAQ 6 Patch Level 25 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-faq-6-patch-level-25 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Survey 6 Patch Level 18 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-survey-6-patch-level-16 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS TimeAccounting 6 Patch Level 16 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-survey-6-patch-level-16 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS SystemMonitoring 6 Patch Level 12 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-systemmonitoring-6-patch-level-12 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS MasterSlave 6 Patch Level 23 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-masterslave-6-patch-level-23 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Clone DB 6 Patch Level 8 Release date: 27-March 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-clone-db-6-patch-level-8 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl . You can find the current releases in the section ?Download.? Bernd Maus ? Online Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-44 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 8 | Fast ? Modern ? Secure Learn more. www.otrs.com OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3867 bytes Desc: not available URL: From melanie.krueger at otrs.com Mon Apr 27 07:40:09 2020 From: melanie.krueger at otrs.com (=?utf-8?Q?Melanie_Kr=C3=BCger?=) Date: Mon, 27 Apr 2020 09:40:09 +0200 Subject: [announce] Security Advisory 2020-11 Message-ID: <19104259-1441-4ED8-80D3-218B4AA56E5E@otrs.com> +++++++++ Security Advisory 2020-11: Security Update for OTRS Framework +++++++++ Releases: OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, ((OTRS)) Community Edition OTRS 5.0.x Release date: 27-April-2020 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2020-11 ------------------------------------------------------------------ ID: OSA-2020-11 Date: 2020-04-24 Title: Information disclosure Severity: 4.5 MEDIUM Product: OTRS 7.0.x, ((OTRS)) Community EditionS 6.0.x, ((OTRS)) Community Edition 5.0.x Fixed in: OTRS 7.0.17, ((OTRS)) Community Edition 6.0.28,((OTRS)) Community Edition 5.0.43 References: CVE-2020-1774 To read the entire Security Advisory please follow this link. https://community.otrs.com/security-advisory-2020-11 Best regards Melanie Krueger ? OTRS AG Zimmersmuehlenweg 11 61440 Oberursel Germany T: +49 6172 681988-0 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 8 | Fast ? Modern ? Secure Learn more: www.otrs.com OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3883 bytes Desc: not available URL: From melanie.krueger at otrs.com Mon Apr 27 07:41:31 2020 From: melanie.krueger at otrs.com (=?utf-8?Q?Melanie_Kr=C3=BCger?=) Date: Mon, 27 Apr 2020 09:41:31 +0200 Subject: [announce] OTRS 6.0.28, OTRS::ITSM 6.0.28, OTRS FAQ 6.0.26, OTRS MasterSlave 6.0.24 and OTRS Clone DB 6.0.9 Message-ID: <3B37D915-6CC3-409B-A1BF-741EF98E0E73@otrs.com> Dear community members, we are proud to announce today the release of OTRS 6.0.28, OTRS::ITSM 6.0.28, OTRS FAQ 6.0.26, OTRS MasterSlave 6.0.24 and OTRS Clone DB 6.0.9. Thank you for helping to improve OTRS. +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS 6.0.28 Release date: 27-April 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-community-edition-6-patch-level-28 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS::ITSM 6.0.28 Release date: 27-April 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrsitsm-module-6-patch-level-28 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS FAQ 6.0.26 Release date: 27-April 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-faq-6-patch-level-26 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS MasterSlave 6.0.24 Release date: 27-April 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-masterslave-6-patch-level-24 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? +++++++++++++++++++++++++ Release Notes +++++++++++++++++++++++ Release: OTRS Clone DB 6.0.9 Release date: 27-April 2020 Status: Patch Level Read the entire release notes: https://community.otrs.com/otrs-clone-db-6-patch-level-9 For a comfortable download and other free promotion specials, please log into our OTRS-Portal with your OTRS-ID (e-mail address) https://portal.otrs.com/otrs/customer.pl. You can find the current releases in the section ?Download.? Best regards Melanie Krueger ? OTRS AG Zimmersmuehlenweg 11 61440 Oberursel Germany T: +49 6172 681988-0 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 8 | Fast ? Modern ? Secure Learn more: www.otrs.com OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3883 bytes Desc: not available URL: From bernd.maus at otrs.com Mon Jun 8 08:15:28 2020 From: bernd.maus at otrs.com (Bernd Maus) Date: Mon, 8 Jun 2020 10:15:28 +0200 Subject: [announce] New Security Update for OTRS References: Message-ID: Security Advisories Dear reader, The following security fix was made: OTRS Security Advisory 2020-12 ID: OSA-2020-12 Date: 2020-06-08 Title: Information disclosure Severity: 3.5 LOW Product: OTRS 8.0.x, OTRS 7.0.x Fixed in: OTRS 7.0.18, OTRS 8.0.4 FULL CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N References: CVE-2020-1775 To read the entire Security Advisory, please follow this link: https://otrs.com/overview-release-notes-security-advisories/security-advisories/? Kind regards, Your OTRS release team Visit www.otrs.com or contact us.? Bernd Maus ? Online Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-44 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 8 | Fast ? Modern ? Secure Learn more. OTRS is a SERVIEW CERTIFIEDTOOL. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3867 bytes Desc: not available URL: From bernd.maus at otrs.com Mon Jun 8 08:18:37 2020 From: bernd.maus at otrs.com (Bernd Maus) Date: Mon, 8 Jun 2020 10:18:37 +0200 Subject: [announce] New Patch Has Been Released For OTRS References: Message-ID: <98A50516-3CD1-4374-B311-DC1F6F55345A@otrs.com> Release Notes Dear customers, We have improved OTRS even further, so we are announcing the following patch level releases today. Thank you for helping to improve OTRS. Release date: June 08, 2020 Patch/Patches: OTRS 8.0.4 OTRS 7.0.18 OTRS::ITSM Module 7.0.18 You?ll find the specific release notes detailed under https://otrs.com/overview-release-notes-security-advisories/release-notes/ OTRS Group managed customers are updated by our Customer Solution Team. OTRS On-Premise customers should obtain the new product version from our exclusive download area at portal.otrs.com . Kind regards, Your OTRS release team Visit www.otrs.com or contact us.? Bernd Maus ? Online Marketing Manager OTRS AG Zimmersm?hlenweg 11 61440 Oberursel Germany T: +49 6172 681988-44 F: +49 9421 56818-18 I: https://www.otrs.com/ Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: Andr? Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 8 | Fast ? Modern ? Secure Learn more. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3867 bytes Desc: not available URL: