openSUSE alert openSUSE-SU-2013:0145-1 (otrs)

From:
    	     
 
opensuse-security@opensuse.org 
To:
    	     
 
opensuse-updates@opensuse.org 
Subject:
    	     
 
openSUSE-SU-2013:0145-1: moderate: update for otrs 
Date:
    	     
 
Wed, 23 Jan 2013 14:05:36 +0100 (CET)
Message-ID:
    	     
 
<20130123130536.61BE8321CD@maintenance.suse.de>
Archive-link:
    	     
 
Article, Thread
              
   openSUSE Security Update: update for otrs
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2013:0145-1
Rating:             moderate
References:         #791014 
Cross-References:   CVE-2012-4751
Affected Products:
                    openSUSE 11.4/standard/i586/patchinfo.21
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:

   This version upgrade to otrs 2.4.15 fixed a Cross-Site
   Scripting (XSS) flaw.


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4/standard/i586/patchinfo.21:

      zypper in -t patch 2012-22

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4/standard/i586/patchinfo.21 (noarch):

      otrs-2.4.15-18.1
      otrs-doc-2.4.15-18.1
      otrs-itsm-2.1.5-18.1


References:

   http://support.novell.com/security/cve/CVE-2012-4751.html
   https://bugzilla.novell.com/791014