- announce - OTRS mailing lists

A New Rolling Release Has Been Released For OTRS
by Melanie Krüger 25 Mar '24

25 Mar '24

1 0

New Security Updates for OTRS
by Melanie Krueger 29 Jan '24

29 Jan '24

Security Advisories Dear reader, The following security fixes were made: OTRS Security Advisory 2024-01 ID: OSA-2024-01 Date: 2024-01-29 Title: Missing file type check in avatar picture upload Severity: 3.5 LOW Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N References: CVE-2024-23790 OTRS Security Advisory 2024-02 ID: OSA-2024-02 Date: 2024-01-29 Title: Unnecessary data is written to log if issues during indexing occurs Severity: 4.9 MEDIUM Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N References: CVE-2024-23791 OTRS Security Advisory 2024-03 ID: OSA-2024-03 Date: 2024-01-29 Title: Insufficient access control Severity: 5.3 MEDIUM Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N References: CVE-2024-23792 OTRS Security Advisory 2024-04 ID: OSA-2024-04 Date: 2024-01-29 Title: A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor Severity: 6.1 MEDIUM Product: OTRS 7.0.x, OTRS Fixed in: OTRS 7.0.49, OTRS 2024.1.1, OTRSAdvancedEditor 7.0.33, OTRSAdvancedEditor 2024.1.1 FULL CVSS v3.1 VECTOR: OTRSAdvancedEditor 2024.1.1 References: CVE-2021-33829 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securi… <https://pg183.keap-link007.com/v2/click/29fb8532430bb2b82c9c5ea7e570de8f/eJ…> Kind regards, Your OTRS release team <https://pg183.keap-link007.com/v2/click/6f6578f592c82fe87489cd6dcda7c153/eJ…> Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link007.com/v2/click/359dc1d6fe272992a5b0aa68120b1d8f/eJ…> Spanish <https://pg183.keap-link007.com/v2/click/e415307c889a1177323a248cd2ae81fc/eJ…> English <https://pg183.keap-link007.com/v2/click/43a7611827acc020bc63063968e7d3af/eJ…> Portuguese <https://pg183.keap-link007.com/v2/click/03a0cc89bd3d7a8d215b523a4536e2c4/eJ…> <https://pg183.keap-link007.com/v2/click/1d0c4b8e22810701dad85958b800f6f0/eJ…> <https://pg183.keap-link007.com/v2/click/05c61bc3168e4c238a230e6cd60f7c76/eJ…> <https://pg183.keap-link007.com/v2/click/627667e361f411b98bee17f7c1e14c83/eJ…> <https://pg183.keap-link007.com/v2/click/88b60360b105376bb050cd3fb5e6b2a3/eJ…> <https://pg183.keap-link007.com/v2/click/87155e4868d782e014ccbddf2fae346c/eJ…> Visit www.otrs.com <https://pg183.keap-link007.com/v2/click/a220500a0289da05d5713d6b143d8433/eJ…> or contact us. <https://pg183.keap-link007.com/v2/click/5aaa4e374f2647cd2fd12abe8c998dcc/eJ…> Legal notice <https://pg183.keap-link007.com/v2/click/d43a3d5971c0509b7d8ba4d4f8d63aa3/eJ…> Privacy Statement <https://pg183.keap-link007.com/v2/click/10d852c7741c604fc147dcf1fe2ef241/eJ…>

1 0

A New Rolling Release Has Been Released For OTRS
by Melanie Krueger 29 Jan '24

29 Jan '24

1 0

New Security Updates for OTRS
by Melanie Krueger 27 Nov '23

27 Nov '23

Security Advisories Dear reader, The following security fix/es was/were made: OTRS Security Advisory 2023-11 ID: OSA-2023-11 Date: 2023-11-07 Title: Password is sent back to client Severity: 8.1. HIGH Product: OTRS 8.0.x Fixed in: OTRS 2023.1.1 FULL CVSS v3.1. VECTOR: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N References: CVE-2023-6254 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securi… Kind regards, Your OTRS release team <https://otrs.com/contact/> <https://otrs.com/contact/> Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link011.com/v2/click/0f9a2178ada66f1328ad59b5045e6750/eJ…> English <https://pg183.keap-link011.com/v2/click/05a1d2538d57ef52056db7deaf1a943d/eJ…> Spanish <https://pg183.keap-link011.com/v2/click/a023a9204849aa837b442c3134299286/eJ…> Portuguese <https://pg183.keap-link011.com/v2/click/4a3696f7a45e3a5e5d7b60c4f8424c0a/eJ…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link011.com/v2/click/2eecf811a3804f82cb625cb3c5079f9e/eJ…> or contact us. <https://pg183.keap-link011.com/v2/click/bff39be1cc9150dee01368fba8cd980b/eJ…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0

A New Rolling Release Have Been Released For OTRS
by Melanie Krueger 27 Nov '23

27 Nov '23

Release Notes Dear customers, We have improved OTRS even further, so we are announcing the following patch level releases today. Thank you for helping to improve OTRS. Release date: November 27, 2023 Rolling Release: OTRS 2023.1.1 You’ll find the specific release notes detailed under https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securi… OTRS Group managed customers are updated by our Customer Solution Team. OTRS On-Premise customers should obtain the new product version from our exclusive download area at https://portal.otrs.com Kind regards, Your OTRS release team Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link006.com/v2/click/7d9e3a298ed1ed20f850c4b65f7b07eb/eJ…> English <https://pg183.keap-link006.com/v2/click/23f7bbdbcafc804aa6e5686935efe26d/eJ…> Spanish <https://pg183.keap-link006.com/v2/click/ba92f948eb1134159aee2ca31fb4ab5f/eJ…> Portuguese <https://pg183.keap-link006.com/v2/click/183be45671b6ce75d058ec5f22fdbfa2/eJ…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link006.com/v2/click/6b45e587089691a7720b6521f2c91263/eJ…> or contact us. <https://pg183.keap-link006.com/v2/click/e8357bd76e97bbdb49ef7106e648b132/eJ…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0

New Security Updates for OTRS
by Melanie Krueger 16 Oct '23

16 Oct '23

Security Advisories Dear reader, The following security fix/es was/were made: OTRS Security Advisory 2023-08 ID: OSA-2023-08 Date: 2023-10-16 Title: External pictures can be loaded even if not allowed by configuration Severity: 5.3 MEDIUM Product: OTRS 7.0.x, OTRS 8.0.x Fixed in: OTRS 7.0.47, OTRS 8.0.37 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N References: CVE-2023-38059 OTRS Security Advisory 2023-09 ID: OSA-2023-09 Date: 2023-10-16 Title: Possible XSS execution in customer information Severity: 3.5 LOW Product: OTRS 7.0.x, OTRS 8.0.x Fixed in: OTRS 7.0.47, OTRS 8.0.37 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N References: CVE-2023-5421 OTRS Security Advisory 2023-10 ID: OSA-2023-10 Date: 2023-10-16 Title: SSL Certificates are not checked for E-Mail Handling Severity: 8.7 HIGH Product: OTRS 7.0.x, OTRS 8.0.x Fixed in: OTRS 7.0.47, OTRS 8.0.37 CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N References: CVE-2023-5422 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securi… Kind regards, Your OTRS release team <https://otrs.com/contact/> <https://otrs.com/contact/> Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link011.com/v2/click/0f9a2178ada66f1328ad59b5045e6750/eJ…> English <https://pg183.keap-link011.com/v2/click/05a1d2538d57ef52056db7deaf1a943d/eJ…> Spanish <https://pg183.keap-link011.com/v2/click/a023a9204849aa837b442c3134299286/eJ…> Portuguese <https://pg183.keap-link011.com/v2/click/4a3696f7a45e3a5e5d7b60c4f8424c0a/eJ…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link011.com/v2/click/2eecf811a3804f82cb625cb3c5079f9e/eJ…> or contact us. <https://pg183.keap-link011.com/v2/click/bff39be1cc9150dee01368fba8cd980b/eJ…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0

New Patches Have Been Released For OTRS
by Melanie Krueger 16 Oct '23

16 Oct '23

Release Notes Dear customers, We have improved OTRS even further, so we are announcing the following patch level releases today. Thank you for helping to improve OTRS. Release date: September 04, 2023 Patch/Patches: OTRS 8.0.37 OTRS 7.0.47 OTRS::ITSM Module 7.0.47 OTRS CloneDB 8.0.11 OTRS MasterSlave 7.0.37 OTRS PrimarySecondary 8.0.22 OTRS Survey 8.0.15 OTRS Survey 7.0.34 OTRS SystemMonitoring 8.0.18 You’ll find the specific release notes detailed under https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securi… OTRS Group managed customers are updated by our Customer Solution Team. OTRS On-Premise customers should obtain the new product version from our exclusive download area at https://portal.otrs.com Kind regards, Your OTRS release team Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link006.com/v2/click/7d9e3a298ed1ed20f850c4b65f7b07eb/eJ…> English <https://pg183.keap-link006.com/v2/click/23f7bbdbcafc804aa6e5686935efe26d/eJ…> Spanish <https://pg183.keap-link006.com/v2/click/ba92f948eb1134159aee2ca31fb4ab5f/eJ…> Portuguese <https://pg183.keap-link006.com/v2/click/183be45671b6ce75d058ec5f22fdbfa2/eJ…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link006.com/v2/click/6b45e587089691a7720b6521f2c91263/eJ…> or contact us. <https://pg183.keap-link006.com/v2/click/e8357bd76e97bbdb49ef7106e648b132/eJ…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0

New Patches Have Been Released For OTRS
by Erkan Yilmaz 04 Sep '23

04 Sep '23

Release Notes Dear customers, We have improved OTRS even further, so we are announcing the following patch level releases today. Thank you for helping to improve OTRS. Release date: September 04, 2023 Patch/Patches: OTRS 8.0.36 OTRS 7.0.46 OTRS::ITSM Module 7.0.46 OTRS CloneDB 8.0.10 OTRS MasterSlave 7.0.36 OTRS PrimarySecondary 8.0.20 OTRS Survey 8.0.14 OTRS Survey 7.0.33 OTRS SystemMonitoring 8.0.17 OTRS TimeAccounting 7.0.29 You’ll find the specific release notes detailed under https://otrs.com/overview-release-notes-security-advisories/release-notes/ <https://pg183.keap-link006.com/v2/click/b1f6464da633c3bc4e01ea0f7524074e/eJ…> OTRS Group managed customers are updated by our Customer Solution Team. OTRS On-Premise customers should obtain the new product version from our exclusive download area at portal.otrs.com <https://pg183.keap-link006.com/v2/click/99136eb043b49be02c378137f95fc314/eJ…>. Kind regards, Your OTRS release team Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link006.com/v2/click/7d9e3a298ed1ed20f850c4b65f7b07eb/eJ…> English <https://pg183.keap-link006.com/v2/click/23f7bbdbcafc804aa6e5686935efe26d/eJ…> Spanish <https://pg183.keap-link006.com/v2/click/ba92f948eb1134159aee2ca31fb4ab5f/eJ…> Portuguese <https://pg183.keap-link006.com/v2/click/183be45671b6ce75d058ec5f22fdbfa2/eJ…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link006.com/v2/click/6b45e587089691a7720b6521f2c91263/eJ…> or contact us. <https://pg183.keap-link006.com/v2/click/e8357bd76e97bbdb49ef7106e648b132/eJ…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0

New Patches Have Been Released For OTRS
by Melanie Krueger 24 Jul '23

24 Jul '23

Release Notes Dear customers, We have improved OTRS even further, so we are announcing the following patch level releases today. Thank you for helping to improve OTRS. Release date: July 24, 2023 Patch/Patches: OTRS 8.0.35 OTRS 7.0.45 OTRS::ITSM Module 7.0.45 OTRS CloneDB 8.0.9 OTRS CloneDB 7.0.24 OTRS MasterSlave 7.0.35 OTRS PrimarySecondary 8.0.19 OTRS Survey 8.0.13 OTRS Survey 7.0.32 OTRS SystemMonitoring 8.0.16 OTRS SystemMonitoring 7.0.24 OTRS TimeAccounting 7.0.28 You’ll find the specific release notes detailed under https://otrs.com/overview-release-notes-security-advisories/release-notes/ <https://pg183.keap-link006.com/v2/click/b1f6464da633c3bc4e01ea0f7524074e/eJ…> OTRS Group managed customers are updated by our Customer Solution Team. OTRS On-Premise customers should obtain the new product version from our exclusive download area at portal.otrs.com <https://pg183.keap-link006.com/v2/click/99136eb043b49be02c378137f95fc314/eJ…>. Kind regards, Your OTRS release team Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link006.com/v2/click/7d9e3a298ed1ed20f850c4b65f7b07eb/eJ…> English <https://pg183.keap-link006.com/v2/click/23f7bbdbcafc804aa6e5686935efe26d/eJ…> Spanish <https://pg183.keap-link006.com/v2/click/ba92f948eb1134159aee2ca31fb4ab5f/eJ…> Portuguese <https://pg183.keap-link006.com/v2/click/183be45671b6ce75d058ec5f22fdbfa2/eJ…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link006.com/v2/click/6b45e587089691a7720b6521f2c91263/eJ…> or contact us. <https://pg183.keap-link006.com/v2/click/e8357bd76e97bbdb49ef7106e648b132/eJ…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0

New Security Updates for OTRS
by Melanie Krueger 24 Jul '23

24 Jul '23

Security Advisories Dear reader, The following security fix/es was/were made: OTRS Security Advisory 2023-04 ID: OSA-2023-04 Date: 2023-06-27 Title: Host header injection by attachments in web service Severity: 6.3 MEDIUM Product: ((OTRS)) Community Edition 6.0.x, OTRS 7.0.x, OTRS 8.0.x Fixed in: OTRS 7.0.45, OTRS 8.0.35 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L References: CVE-2023-38060 OTRS Security Advisory 2023-05 ID: OSA-2023-05 Date: 2023-06-29 Title: Code execution via System Configuration Severity: 7.2 HIGH Product: ((OTRS)) Community Edition 6.0.x, OTRS 7.0.x, OTRS 8.0.x Fixed in: OTRS 7.0.45, OTRS 8.0.35 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H References: CVE-2023-38056 OTRS Security Advisory 2023-06 ID: OSA-2023-06 Date: 2023-07-24 Title: Possible XSS stored in survey answers Severity: 4.1 MEDIUM Product: Survey 6.0.x, Survey 7.0.x, Survey 8.0.x Fixed in: Survey 7.0.32, Survey 8.0.13 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N References: CVE-2023-38057 OTRS Security Advisory 2023-07 ID: OSA-2023-07 Date: 2023-07-24 Title: Tickets can be moved without permission Severity: 4.1 MEDIUM Product: OTRS 8.0.x Fixed in: OTRS 8.0.35 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N References: CVE-2023-38058 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/overview-release-notes-security-advisories/security-adviso… <https://pg183.keap-link011.com/v2/click/6fb2d7645c3a9007f68835596c8b836c/eJ…> Kind regards, Your OTRS release team <https://pg183.keap-link011.com/v2/click/f77fb911440f3bedc8a2c68cc94b7550/eJ…> Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link011.com/v2/click/0f9a2178ada66f1328ad59b5045e6750/eJ…> English <https://pg183.keap-link011.com/v2/click/05a1d2538d57ef52056db7deaf1a943d/eJ…> Spanish <https://pg183.keap-link011.com/v2/click/a023a9204849aa837b442c3134299286/eJ…> Portuguese <https://pg183.keap-link011.com/v2/click/4a3696f7a45e3a5e5d7b60c4f8424c0a/eJ…> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link011.com/v2/click/2eecf811a3804f82cb625cb3c5079f9e/eJ…> or contact us. <https://pg183.keap-link011.com/v2/click/bff39be1cc9150dee01368fba8cd980b/eJ…> OTRS AG Zimmersmühlenweg 11 61440 Oberursel Germany +49 6172 681988 0

1 0