183562 – www-apps/otrs XSS vulnerabilities

Bug 183562 - www-apps/otrs XSS vulnerabilities

Summary: www-apps/otrs XSS vulnerabilities

Status:	RESOLVED DUPLICATE of bug 177630

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	High critical (vote)
Assignee:	Renat Lumpau (RETIRED)

URL:	http://otrs.org/advisory/OSA-2007-01-en/
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2007-06-28 18:30 UTC by Allen Parker
Modified:	2007-06-28 18:46 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Allen Parker 2007-06-28 18:30:22 UTC

OTRS version 2.0.4 should be immediately updated to 2.0.5 (stable) due to multiple security fixes.

OTRS versions 2.1.6 and 2.1.7 have both been released. Latest ~arch is 2.1.5. 2.2.0 should be here in about 4 days.

Current 2.0.x ebuild *does* work when tested against otrs-2.0.5 locally, and 2.1.7 works on 2.1.5 ebuild.

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2007-06-28 18:46:10 UTC


*** This bug has been marked as a duplicate of bug 177630 ***