Security Advisory 2020-11

--===============3482453636460697050==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_8A3CA381-FB0D-4A52-B7E8-0CAF1353A973";
	protocol="application/pkcs7-signature";
	micalg=sha-256


--Apple-Mail=_8A3CA381-FB0D-4A52-B7E8-0CAF1353A973
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

+++++++++ Security Advisory 2020-11: Security Update for OTRS Framework =
+++++++++

Releases:            OTRS 7.0.x, ((OTRS)) Community Edition 6.0.x, =
((OTRS)) Community Edition OTRS 5.0.x
Release date:        27-April-2020
Status:              Patch Level Release

SECURITY FIXES:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20
------------------------------------------------------------------
OTRS Security Advisory 2020-11           <security at otrs.org>
------------------------------------------------------------------
ID:            OSA-2020-11=20
Date:          2020-04-24
Title:         Information disclosure
Severity:      4.5 MEDIUM
Product:       OTRS 7.0.x, ((OTRS)) Community EditionS 6.0.x, ((OTRS)) =
Community Edition 5.0.x=20
Fixed in:      OTRS 7.0.17, ((OTRS)) Community Edition 6.0.28,((OTRS)) =
Community Edition 5.0.43    =20
References:    CVE-2020-1774           =20

To read the entire Security Advisory please follow this link.

https://community.otrs.com/security-advisory-2020-11


Best regards
Melanie Krueger
=E2=80=93

OTRS AG
Zimmersmuehlenweg 11
61440 Oberursel
Germany

T: +49 6172 681988-0
F: +49 9421 56818-18
I:  https://www.otrs.com/

Business location: Oberursel, Country Court: Bad Homburg, HRB 10751, VAT =
ID: DE256610065
Chairman: Burchard Steinbild, Managing Board: Andr=C3=A9 Mindermann =
(CEO), Christopher Kuhn, Sabine Riedel


OTRS 8 | Fast =E2=80=A2 Modern =E2=80=A2 Secure=20
Learn more: www.otrs.com

OTRS is a SERVIEW CERTIFIEDTOOL.






--Apple-Mail=_8A3CA381-FB0D-4A52-B7E8-0CAF1353A973
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_8A3CA381-FB0D-4A52-B7E8-0CAF1353A973--

--===============3482453636460697050==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/mailman/listinfo/announce

--===============3482453636460697050==--