announce

Download

announce@lists.otrs.org

February 2021

1 participants
2 discussions

New Patches Have Been Released For OTRS
by Bernd Maus 08 Feb '21

08 Feb '21

Release Notes Dear customers, We have improved OTRS even further, so we are announcing the following patch level releases today. Thank you for helping to improve OTRS. Release date: February 8, 2021 Patch/Patches: OTRS 8.0.11 OTRS 7.0.24 OTRS::ITSM Module 7.0.24 OTRS CloneDB 7.0.9 OTRS MasterSlave 7.0.23 OTRS Survey 7.0.20 OTRS SystemMonitoring 8.0.5 OTRS SystemMonitoring 7.0.14 OTRS TimeAccounting 7.0.18 You’ll find the specific release notes detailed under https://otrs.com/overview-release-notes-security-advisories/release-notes/ <https://pg183.infusion-links.com/api/v1/click/5221763228762112/464695849700…> To benefit from the latest major release, OTRS Group managed customers are updated by our Customer Solution Team after scheduling an individual maintenance appointment. OTRS On-Premise customers can obtain our new product version by ordering our migration service. Kind regards, Your OTRS release team Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.infusion-links.com/api/v1/click/6451852784304128/464695849700…> English <https://pg183.infusion-links.com/api/v1/click/6587240286912512/464695849700…> Spanish <https://pg183.infusion-links.com/api/v1/click/6186708816756736/464695849700…> Portuguese <https://pg183.infusion-links.com/api/v1/click/4663782133071872/464695849700…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.infusion-links.com/api/v1/click/5488329954557952/464695849700…> or contact us. <https://pg183.infusion-links.com/api/v1/click/6729523963494400/464695849700…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0

New Security Updates for OTRS
by Bernd Maus 08 Feb '21

08 Feb '21

Security Advisories Dear reader, The following security fix/es was/were made: OTRS Security Advisory 2021-05 ID: OSA-2021-05 Date: 2021-02-08 Title: Several Vulnerabilites in CKEditor Severity: 5.5 MEDIUM Product: OTRS 8.0.x, OTRS 7.0.x, OTRS 6.0.x Fixed in: OTRS 8.0.11, OTRS 7.0.24 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L References: CVE-2018-17960, https://ckeditor.com/cke4/release-notes <https://ckeditor.com/cke4/release-notes> OTRS Security Advisory 2021-04 ID: OSA-2021-04 Date: 2021-02-08 Title: Agent is able to link customer's Config Items without permission Severity: 3.5 LOW Product: OTRSCIsInCustomerFrontend 7.0.14 Fixed in: OTRSCIsInCustomerFrontend 7.0.15 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N References: CVE-2021-21436 OTRS Security Advisory 2021-03 ID: OSA-2021-03 Date: 2021-02-08 Title: Dynamic templates reveal sensitive data when OTRS tags are used Severity: 4.3. MEDIUM Product: OTRSTicketForms 6.0.40, OTRSTicketForms 7.0.29 and OTRSTicketForms 8.0.3 Fixed in: OTRSTicketForms 7.0.30 and OTRSTicketForms 8.0.4 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N References: CVE-2020-1779 OTRS Security Advisory 2021-02 ID: OSA-2021-02 Date: 2021-02-08 Title: Information exposure in PDF export Severity: 5.7 MEDIUM Product: OTRS 8.0.x, OTRS 7.0.x, OTRS 6.0.x Fixed in: OTRS 8.0.11, OTRS 7.0.24 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N References: CVE-2021-21435 OTRS Security Advisory 2021-01 ID: OSA-2021-01 Date: 2021-02-08 Title: XSS Severity: 3.5 LOW Product: Survey 7.0.x, Survey 6.0.x Fixed in: Survey 7.0.20 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N References: CVE-2021-21434 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/overview-release-notes-security-advisories/security-adviso… <https://pg183.infusion-links.com/api/v1/click/6673080509923328/464695849700…> Kind regards, Your OTRS release team Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.infusion-links.com/api/v1/click/6230505336471552/464695849700…> English <https://pg183.infusion-links.com/api/v1/click/5235474643419136/464695849700…> Spanish <https://pg183.infusion-links.com/api/v1/click/5923083187257344/464695849700…> Portuguese <https://pg183.infusion-links.com/api/v1/click/5662171054342144/464695849700…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.infusion-links.com/api/v1/click/5347555086565376/464695849700…> or contact us. <https://pg183.infusion-links.com/api/v1/click/5292666427932672/464695849700…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0