announce

Thread Start a new thread

Download

announce@lists.otrs.org

January 2024

1 participants
2 discussions

New Security Updates for OTRS
by Melanie Krueger 29 Jan '24

29 Jan '24

Security Advisories Dear reader, The following security fixes were made: OTRS Security Advisory 2024-01 ID: OSA-2024-01 Date: 2024-01-29 Title: Missing file type check in avatar picture upload Severity: 3.5 LOW Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N References: CVE-2024-23790 OTRS Security Advisory 2024-02 ID: OSA-2024-02 Date: 2024-01-29 Title: Unnecessary data is written to log if issues during indexing occurs Severity: 4.9 MEDIUM Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N References: CVE-2024-23791 OTRS Security Advisory 2024-03 ID: OSA-2024-03 Date: 2024-01-29 Title: Insufficient access control Severity: 5.3 MEDIUM Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N References: CVE-2024-23792 OTRS Security Advisory 2024-04 ID: OSA-2024-04 Date: 2024-01-29 Title: A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor Severity: 6.1 MEDIUM Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1, OTRSAdvancedEditor 7.0.33, OTRSAdvancedEditor 2024.1.1 FULL CVSS v3.1 VECTOR: OTRSAdvancedEditor 2024.1.1 References: CVE-2021-33829 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securi… <https://pg183.keap-link007.com/v2/click/29fb8532430bb2b82c9c5ea7e570de8f/eJ…> Kind regards, Your OTRS release team <https://pg183.keap-link007.com/v2/click/6f6578f592c82fe87489cd6dcda7c153/eJ…> Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link007.com/v2/click/359dc1d6fe272992a5b0aa68120b1d8f/eJ…> Spanish <https://pg183.keap-link007.com/v2/click/e415307c889a1177323a248cd2ae81fc/eJ…> English <https://pg183.keap-link007.com/v2/click/43a7611827acc020bc63063968e7d3af/eJ…> Portuguese <https://pg183.keap-link007.com/v2/click/03a0cc89bd3d7a8d215b523a4536e2c4/eJ…> <https://pg183.keap-link007.com/v2/click/1d0c4b8e22810701dad85958b800f6f0/eJ…> <https://pg183.keap-link007.com/v2/click/05c61bc3168e4c238a230e6cd60f7c76/eJ…> <https://pg183.keap-link007.com/v2/click/627667e361f411b98bee17f7c1e14c83/eJ…> <https://pg183.keap-link007.com/v2/click/88b60360b105376bb050cd3fb5e6b2a3/eJ…> <https://pg183.keap-link007.com/v2/click/87155e4868d782e014ccbddf2fae346c/eJ…> Visit www.otrs.com <https://pg183.keap-link007.com/v2/click/a220500a0289da05d5713d6b143d8433/eJ…> or contact us. <https://pg183.keap-link007.com/v2/click/5aaa4e374f2647cd2fd12abe8c998dcc/eJ…> Legal notice <https://pg183.keap-link007.com/v2/click/d43a3d5971c0509b7d8ba4d4f8d63aa3/eJ…> Privacy Statement <https://pg183.keap-link007.com/v2/click/10d852c7741c604fc147dcf1fe2ef241/eJ…>

1 0

A New Rolling Release Has Been Released For OTRS
by Melanie Krueger 29 Jan '24

29 Jan '24

Release Notes Dear customers, We have improved OTRS even further, so we are announcing the following rolling releases today. Thank you for helping to improve OTRS. Release date: January 29, 2024 Rolling Release: OTRS 2024.1.2 You’ll find the specific release notes detailed under https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securi… <https://pg183.keap-link011.com/v2/click/524fd583a884a8ee9e1a3d44b2ecd452/eJ…> OTRS Group managed customers are updated by our Customer Solution Team. OTRS On-Premise customers should obtain the new product version from our exclusive download area at https://portal.otrs.com <https://pg183.keap-link011.com/v2/click/9c49c7723fb6e32a6a12bc2185a6206f/eJ…>. Kind regards, Your OTRS release team Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link011.com/v2/click/82fdb71f56deb06c4a40315b1c8ecf17/eJ…> Spanish <https://pg183.keap-link011.com/v2/click/071f1c4b9905a47bf34924cb03c6cf75/eJ…> English <https://pg183.keap-link011.com/v2/click/e5fba6edfde4e5dda537a49e34804a18/eJ…> Portuguese <https://pg183.keap-link011.com/v2/click/33a6d48122b4532df694334c6aa6ff3a/eJ…> <https://pg183.keap-link011.com/v2/click/d2dced1554000f5df80a2d86b89f916d/eJ…> <https://pg183.keap-link011.com/v2/click/db075834cdde3276da1fa2b2e6bc8e55/eJ…> <https://pg183.keap-link011.com/v2/click/48139de974bcb7e70c2d9f1a33ba755b/eJ…> <https://pg183.keap-link011.com/v2/click/2eb2946a129af758e9cfb7c668aabe9a/eJ…> <https://pg183.keap-link011.com/v2/click/1bfb4803d395bf619562dbf6f79b3f15/eJ…> Visit www.otrs.com <https://pg183.keap-link011.com/v2/click/f1c74ff26772942b10eafb1a3296c063/eJ…> or contact us. <https://pg183.keap-link011.com/v2/click/52bbdd8e172f8c6ba82eb07d1fe56589/eJ…> Legal notice <https://pg183.keap-link011.com/v2/click/057b347ea4858ae288575b1a666c68d5/eJ…> Privacy Statement <https://pg183.keap-link011.com/v2/click/5477c9c435c20c9b305b36888058d136/eJ…>

1 0