-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 18 Jun 2021 15:10:23 +0200 Source: otrs2 Architecture: source Version: 6.0.32-5 Distribution: unstable Urgency: high Maintainer: Patrick Matthäi <pmatthaei@debian.org> Changed-By: Patrick Matthäi <pmatthaei@debian.org> Closes: 989992 Changes: otrs2 (6.0.32-5) unstable; urgency=high . * Add upstream patch 14-ZSA-2021-03: There is a denial of service issue, when a mail with a special crafted url is received. This can lead to a maxout of the available server-CPU(s) and can reduce the quality of service or even bring the system to a halt. This addresses CVE-2021-21439. Closes: #989992 * Add upstream patch 15-ZSA-2021-06: There is a XSS vulnerability in the ticket overviews, which can used to extract all kind of information just by having a e-mail shown in an overview. An attacker can send a prepared e-mail to the system to trigger the attack. This addresses CVE-2021-21441. Closes: #989992 Checksums-Sha1: 1f5675aa54ee006da581ec852ef4079bb67006c0 1824 otrs2_6.0.32-5.dsc d56d7f4d542776fe673747f84689742da31ebe52 43068144 otrs2_6.0.32.orig.tar.gz 1b086d99fb97a6a5365fe120cbdd22f1b68ff943 38968 otrs2_6.0.32-5.debian.tar.xz aa5365d85e7a285af112bbf6162a55423981b4c5 6067 otrs2_6.0.32-5_source.buildinfo Checksums-Sha256: 1aca9454ae03873cf17fca1de73370ebc380d3e39de6ebe5d515cdc2df446818 1824 otrs2_6.0.32-5.dsc c0db57d08038fa0f74000eb18c6995fbb4a74c4e0c97fc2f349f1bbb4c4b61da 43068144 otrs2_6.0.32.orig.tar.gz d71efc24c71134799cc658439d7a306df7464d08750e448083b226dec0f52351 38968 otrs2_6.0.32-5.debian.tar.xz dfc611167e1ed43ec71b8f41dba5613477acde7918585cfae4cc6b5f804258ae 6067 otrs2_6.0.32-5_source.buildinfo Files: 6b380bd1d0e6b67dbc35df744aac445d 1824 non-free/web optional otrs2_6.0.32-5.dsc 68c8bb26bef63d59e3aa1291b8d54543 43068144 non-free/web optional otrs2_6.0.32.orig.tar.gz c8f94d73026510502c3f2cf73aa3ad0d 38968 non-free/web optional otrs2_6.0.32-5.debian.tar.xz d35825edf1f925dd2a4b078bfa023329 6067 non-free/web optional otrs2_6.0.32-5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEWKA9xYJCWk3IuQ4TEtmwSpDL2OQFAmDMm2QACgkQEtmwSpDL 2OSLmw//Xhy5d36NW6c18JzjORwUuHwh4Ggc43D8MJJ7uRG+bX1i/VWkDq8B7zYm cAc0jE0LWDslGnT+pAR47P+A0Rw20tZIUGK8iO/kfKuGzjDs/H7ZXhnSrDHzFPyq 8rfbRN00yqndRFzG7HpSAH1mf/hKgryxFzfvXO0RhOIQy18amm3vTlQ3ux5dmqTF L1uvoW91B15sPl8Uy1Et0HpF7N/s36KniQH79fr/Y7OAbOUse3z4D+BthgANrgGc aBUlAICQ+Y4+bDkpxM9aHxDw2vYUowD3bZeXl4E2cJj9sLVwk/pCPeRRW8kHSNXX M3ileAi8poXhhUMMBQ40I0sK4Nai51VrO/5HS1iZVBF1y7Qu7950do8H4kpIzwAy UTcXm6Ru07Udyplxf+r9VoMEPzV3vmvb82AIlAZXufLzTrC0Mzl1nc53ifa7DlVm 6gLME3x7DJbyStnQh7uSnG7Gb13phcT1tYJqo4oEjubn7zNSeXhn9pt8JAwlobCF K9/z9gIPFj/yk2mNIqt7KcSq4R9YhUnU8id9G5oBC6MRrJHal+AFdbkaA9rY75YL otplclRfv+846uDaUxEf9N+HpY3HVoUmMSrg8pwaiAyzWRSuBgXwiwpZ7sSzhUAW Qd76zLy1B1LC2e+DqQQdbZdy3zIW8T6tJ0pM8fyrnNmTCmBvuFc= =mBbQ -----END PGP SIGNATURE-----
