Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
64321b6e by Moritz Mühlenhoff at 2021-08-06T19:46:55+02:00
one otrs issue undetermined
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4492,12 +4492,10 @@ CVE-2021-36094
CVE-2021-36093
RESERVED
CVE-2021-36092 (It's possible to create an email which contains specially
crafted link ...)
- - otrs2 <unfixed> (bug #991593)
- [bullseye] - otrs2 <no-dsa> (Non-free not supported)
- [buster] - otrs2 <no-dsa> (Non-free not supported)
- [stretch] - otrs2 <no-dsa> (Non-free not supported)
+ - otrs2 <undetermined>
NOTE: https://otrs.com/release-notes/otrs-security-advisory-2021-15/
- NOTE: Reference is for OTRS, no reference for znuny yet (in bullseye
src:otrs2 is the znuny fork)
+ NOTE: Unclear whether this affects Znuny, they could not reproduce it:
+ NOTE: https://github.com/znuny/Znuny/issues/105#issuecomment-894013730
CVE-2021-36091 (Agents are able to list appointments in the calendars without
required ...)
- otrs2 6.0.32-6 (bug #991593)
[bullseye] - otrs2 <no-dsa> (Non-free not supported)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64321b6eaed807f2f33b3d851ec57bc7dfd1dd08
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64321b6eaed807f2f33b3d851ec57bc7dfd1dd08
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
