Security Advisory 2020-05, Security Advisory 2020-04

--===============8867913020629196035==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_FB7FFFAC-F105-4C37-997B-56CDD51F0093";
	protocol="application/pkcs7-signature";
	micalg=sha1


--Apple-Mail=_FB7FFFAC-F105-4C37-997B-56CDD51F0093
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



+++++++++ Security Advisory 2020-05: Security Update for OTRS Framework =
+++++++++



Releases:           OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x
Release date:       07-February-2020
Status:             Patch Level Release

SECURITY FIXES:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20
------------------------------------------------------------------
OTRS Security Advisory 2020-05           <security at otrs.org>
------------------------------------------------------------------
ID:                OSA-2020-05
Date:              2020-02-07
Title:             Vulnerability in third-party library - jquery=20
Severity:          Medium
Product:           OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x
Fixed in:          OTRS 7.0.15, ((OTRS)) Community Edition 6.0.26     =20=

References:        CVE-2019-11358


To read the entire Security Advisory please follow this link.

https://community.otrs.com/security-advisory-2020-05






+++++++++ Security Advisory 2020-04: Security Update for OTRS Framework =
+++++++++



Releases:          OTRS 7.0.x
Release date:      07-February-2020
Status:            Patch Level Release

SECURITY FIXES:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20
------------------------------------------------------------------
OTRS Security Advisory 2020-04          <security at otrs.org>
------------------------------------------------------------------
ID:                OSA-2020-04=20
Date:              2020-02-07
Title:             External interface does not invalidate user session=20=

Severity:          Medium
Product:           OTRS 7.0.x
Fixed in:          OTRS 7.0.15  =20
References:        CVE-2020-1768      =20


To read the entire Security Advisory please follow this link.

https://community.otrs.com/security-advisory-2020-04


With kind regards


Sabrina Seubert
=E2=80=93
Marketing Manager

OTRS AG
Zimmersm=C3=BChlenweg 11
61440 Oberursel
Germany

T: +49 6172 681988-0
F: +49 9421 56818-18=20
I:  https://www.otrs.com/

Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT =
ID: DE256610065
Chairman: Burchard Steinbild, Managing Board: Andr=C3=A9 Mindermann =
(CEO), Christopher Kuhn, Sabine Riedel


OTRS 7 | Automation =E2=80=A2 Agility =E2=80=A2 Communication =E2=80=A2 =
Transparency
Find out more
OTRS is a SERVIEW CERTIFIEDTOOL.




---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/mailman/listinfo/announce





--Apple-Mail=_FB7FFFAC-F105-4C37-997B-56CDD51F0093
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_FB7FFFAC-F105-4C37-997B-56CDD51F0093--

--===============8867913020629196035==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/mailman/listinfo/announce

--===============8867913020629196035==--