++++++++++ OTRS Security Advisory 2010-01 OTRS 2.1.9 ++++++++++

Release:       OTRS 2.1.9

Status:        stable

Code Name:     Playa Esmeralda

SECURITY FIXES:

===============

---------------------------------------------------------------

 OTRS Security Advisory 2010-01            <security@otrs.org>

---------------------------------------------------------------

 ID:         OSA-2010-01

 Date:       2010-02-08

 Title:      Vulnerability in OTRS-Core allows SQL-Injection

 Severity:   Critical

 Product:    OTRS 2.4.x, OTRS 2.3.x, OTRS 2.2.x, OTRS 2.1.x

 Fixed in:   OTRS 2.4.7, OTRS 2.3.5, OTRS 2.2.9, OTRS 2.1.9

 URL:        http://otrs.org/advisory/OSA-2010-01-en/

 CVE:        CVE-2010-0438

---------------------------------------------------------------

To read the entire Security Advisory please follow this link:

ENGLISH VERSION:

GERMAN VERSION:

BUG FIXES:

==========

* Bug# 2491 - OTRS crashes after initial login on fresh

              installation on perl 5.10.

              [ http://bugs.otrs.org/show_bug.cgi?id=2491 ]

MD5 CHECKSUMS:

==============

dec0657db6cd3a627ee6a206f9c1a168

5393d405232abe1a4017f339587f41ec

76c0f6343ad639a1f599263d7b1ce8c0

eb3388eb5e36644033958e45aa745f95

44fadc2919c733ec3e7bae1aea26fb07

8df01a19a8e9f0d35d3cf2c79d184f44

40626e5734c43e9fb4b247563c2c4b29

433cde4c5b2781fd3749e58fb1aed084

3585a3f7397a5e0607f02cd0fc4187ab

83238bb68b14de4ceea7910c3efc9c00

dd1351534a5a3308ce9932808551dadb

DOWNLOAD FIXED RELEASES:

========================

YOUR CONTRIBUTION:

===================

* Please send information regarding vulnerabilities in OTRS to

  security@otrs.org.

* We kindly ask for your assistance to update the translation 

  files! The current status can be found here: 

  http://users.otrs.com/~me/i18n/

FEEDBACK & BUG REPORTING: 

========================= 

Although OTRS 2.1.9 has been tested before, we appreciate

your contributions. As always, you’re encouraged to tell 

us what you think, using this feedback e-Mail: [enjoy at otrs.com] 

or by filing a bug in Bugzilla [http://bugs.otrs.org].

MEET US:

========

CU@ PINK - 14th. IT Service Management Conference in Las Vegas (USA) 

and get to know more about OTRS  at booth no. 517b from Feb 21-24, 2010!

CU@ CeBIT 2010 in Hannover (Germany) and get to know more 

about OTRS at booth no. C37, in hall 2 from March 2.-6., 2010!