Accepted otrs2 3.3.9-3 (source all) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 18 Dec 2014 19:02:56 +0100
Source: otrs2
Binary: otrs2 otrs
Architecture: source all
Version: 3.3.9-3
Distribution: unstable
Urgency: medium
Maintainer: Patrick Matthäi <pmatthaei@debian.org>
Changed-By: Patrick Matthäi <pmatthaei@debian.org>
Description:
otrs - Open Ticket Request System (OTRS 3)
otrs2 - Open Ticket Request System
Changes:
otrs2 (3.3.9-3) unstable; urgency=medium
.
* Add patch 16-CVE-2014-9324.diff which fixes CVE-2014-9324, also known as
OSA-2014-06:
An attacker with valid OTRS credentials could access and manipulate ticket
data of other users via the GenericInterface, if a ticket webservice is
configured and not additionally secured.
Checksums-Sha1:
0088cb32973980536621f70d1d3cfdd16d8ec48e 1788 otrs2_3.3.9-3.dsc
8b602dbaf754a6fa42b64748ff1b3966dc0a7d43 44936 otrs2_3.3.9-3.debian.tar.xz
9cc80a3cfc6a1ed7adb08f6d95f70dd2377e34a3 5666232 otrs2_3.3.9-3_all.deb
d61a30900a2332c5ed81d75d4bd3c5b7bd2224cf 183970 otrs_3.3.9-3_all.deb
Checksums-Sha256:
c9166faad923d4e62883f2eaa5acd139c48c2d8f4787175afecf8bdbb73d62c5 1788 otrs2_3.3.9-3.dsc
4c0629bac2c5a85696032066f909781e77911ef9ca0f80e3480eb6b3adf33ea6 44936 otrs2_3.3.9-3.debian.tar.xz
7c5b1acc471e01e36bde22169c3af89096d02fe455f8a7578dbaeab5d5587a4f 5666232 otrs2_3.3.9-3_all.deb
21c89d52f77446aecd2b54695eb07104196998101bb08c1c7fba25311cae86e0 183970 otrs_3.3.9-3_all.deb
Files:
947c427add169f323aafd5aa528be24f 1788 web optional otrs2_3.3.9-3.dsc
d2bf476d405f17c0ee4bf7567ecc883d 44936 web optional otrs2_3.3.9-3.debian.tar.xz
58da1e9ce3d29eadb43cc93a1d92c806 5666232 web optional otrs2_3.3.9-3_all.deb
6fd18cc0935ab59814c5dc48b5dc5095 183970 web optional otrs_3.3.9-3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=9xO/
-----END PGP SIGNATURE-----
Reply to: