Mailinglist Archive: opensuse-updates (94 mails)

[opensuse-security@xxxxxxxxxxxx]

   openSUSE Security Update: update for otrs
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2013:0145-1
Rating:             moderate
References:         #791014 
Cross-References:   CVE-2012-4751
Affected Products:
                    openSUSE 11.4/standard/i586/patchinfo.21
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:

   This version upgrade to otrs 2.4.15 fixed a Cross-Site
   Scripting (XSS) flaw.


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4/standard/i586/patchinfo.21:

      zypper in -t patch 2012-22

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4/standard/i586/patchinfo.21 (noarch):

      otrs-2.4.15-18.1
      otrs-doc-2.4.15-18.1
      otrs-itsm-2.1.5-18.1


References:

   http://support.novell.com/security/cve/CVE-2012-4751.html
   https://bugzilla.novell.com/791014