-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Aug 2018 13:30:48 +0200 Source: otrs2 Binary: otrs2 otrs Architecture: source all Version: 3.3.18-1+deb8u5 Distribution: jessie-security Urgency: high Maintainer: Patrick Matthäi <pmatthaei@debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: otrs - Open Ticket Request System (OTRS 3) otrs2 - Open Ticket Request System Changes: otrs2 (3.3.18-1+deb8u5) jessie-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2018-14593: An attacker who is logged into OTRS as a user may escalate their privileges by accessing a specially crafted URL. Checksums-Sha1: 33a875a49547cdc27c48d1288002e99a449d5be1 1971 otrs2_3.3.18-1+deb8u5.dsc 5dc54a753cb5a830d4fae37545a70c64b01eb324 44592 otrs2_3.3.18-1+deb8u5.debian.tar.xz 7a49058d63f739c82356aa968e3fe2fc5a29b536 5678882 otrs2_3.3.18-1+deb8u5_all.deb a7d7436ca9694d2dbacc620a0df07e5710712ea9 189508 otrs_3.3.18-1+deb8u5_all.deb Checksums-Sha256: 0fc92bf7ac7242f94a8d1faa6a5802e555296490b05358eb04b9565d26110df6 1971 otrs2_3.3.18-1+deb8u5.dsc a2a5f97ed7fcdbe6d1c4d1a328a3fc3786e81378c2b8c41bfa032699b489b140 44592 otrs2_3.3.18-1+deb8u5.debian.tar.xz aae7b99d644fadc2701171ca0bddbb469ad239295676299d66860324e269de4c 5678882 otrs2_3.3.18-1+deb8u5_all.deb 14f87d4a77998976c278f8078cf0fb6b383d20f668efe928fc0de980ec85e6a7 189508 otrs_3.3.18-1+deb8u5_all.deb Files: ef2c5d8fa33007b7a482122a172d0e4d 1971 web optional otrs2_3.3.18-1+deb8u5.dsc 8008d42d99a453edfd17ca4506d1e252 44592 web optional otrs2_3.3.18-1+deb8u5.debian.tar.xz 8d59e5050ff28beb249e76901beb6b7e 5678882 web optional otrs2_3.3.18-1+deb8u5_all.deb 2d1996d9e039aebef724ed4920afc988 189508 web optional otrs_3.3.18-1+deb8u5_all.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlt8DY9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hkn5gQAKXAkJo7gekp4IEx28N/3VaRKvGOu+m4tffu x+6zVSrJ8eMMFGac2iI2Vv6bJtYenxaJKYmhyC8tUkiMwUgiwzm1nqVQpsSg990q NMr1tNW2j3JNq4dxdumF0g8t+h6s0kzPqM9G/UCDlIqWiloL7lk+ymg2N8bMFzLB 84pA7xvStct4fbR0mdVyYLpUrfI6CIG1h+KZfMWJ5zDe0eCQ2BIaCqBDT6UltKTj qFN5QkCfr0w47gbAuoAqsH1AffflzmP6jGUIBm0qZQYp0GsW9Y+7tLk28Dw1Fmgi cN7UgL4odWxVkroJXZtWCVKNcUvyPmS/o0FODCa/1VFmR3Wv4I93/+SvsoF0sFQ2 Lpnjuab0WJDmiFbDQCneLtKD8fzp7TDGAZtkss76n2DsZZ4LKcZgda91a+4TmDTT Q0d8egXXfrrrO/pNQ3LR5A88V4ZgNyI1boJP5niz0kCF/ptxLhgXirnDEgXjCHsW 5l4b/cybMSWiQoRhTnPZ/+pV1+28pvzGrJRssLMH1qQtUsHRL59dJFSzdMrGu16s +PVCmRlsL67kQ1UsrkgdRsVH549F46eeQi0QLPm9hBq2mEvYyZHvqMo32OgKvErs M8WaGp0gJe/dizkImmGhZ/YWLwCQzmyqb3fPImuqhjaxpfZRloY1W7kl7H08SzOj 1qjzWWR/ =hGxt -----END PGP SIGNATURE-----