Security update for otrs (important)

2017-11-2318:09:38

lists.opensuse.org

218

EPSS

0.002

Percentile

65.0%

JSON

This update for otrs fixes the following security issues:

CVE-2017-15864: Remote authenticated attackers could have caused otrs to
disclose configuration information, including database credentials
(boo#1068677, OSA-2017-06)
CVE-2017-16664: Remote authenticated attackers could have caused the
execution of shell commands with the permission of the web server user
(boo#1069391, OSA-2017-07)

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.2noarchotrs< 3.3.20-5.11.1otrs-3.3.20-5.11.1.noarch.rpm
openSUSE Leap42.2noarchotrs-doc< 3.3.20-5.11.1otrs-doc-3.3.20-5.11.1.noarch.rpm
openSUSE Leap42.3noarchotrs< 3.3.20-14.1otrs-3.3.20-14.1.noarch.rpm
openSUSE Leap42.2noarchotrs-itsm< 3.3.14-5.11.1otrs-itsm-3.3.14-5.11.1.noarch.rpm
openSUSE Leap42.3noarchotrs-itsm< 3.3.14-14.1otrs-itsm-3.3.14-14.1.noarch.rpm
openSUSE Leap42.3noarchotrs-doc< 3.3.20-14.1otrs-doc-3.3.20-14.1.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.2	noarch	otrs	< 3.3.20-5.11.1	otrs-3.3.20-5.11.1.noarch.rpm
openSUSE Leap	42.2	noarch	otrs-doc	< 3.3.20-5.11.1	otrs-doc-3.3.20-5.11.1.noarch.rpm
openSUSE Leap	42.3	noarch	otrs	< 3.3.20-14.1	otrs-3.3.20-14.1.noarch.rpm
openSUSE Leap	42.2	noarch	otrs-itsm	< 3.3.14-5.11.1	otrs-itsm-3.3.14-5.11.1.noarch.rpm
openSUSE Leap	42.3	noarch	otrs-itsm	< 3.3.14-14.1	otrs-itsm-3.3.14-14.1.noarch.rpm
openSUSE Leap	42.3	noarch	otrs-doc	< 3.3.20-14.1	otrs-doc-3.3.20-14.1.noarch.rpm