Multiple XSS and denial of service vulnerabilitie

[Bas van den Dikkenberg]

Binary package hint: otrs

There is a New version of otrs out to fix this isue see http://otrs.org/releases/2.4.8/

[Marc Deslauriers (mdeslaur)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

[Jamie Strandboge (jdstrand)]

This was fixed in 2.4.8+dfsg1-1 in Ubuntu 11.04.

[Bas van den Dikkenberg (bas-dikkenberg)]

When wil there be a fix for 10.04 becouse thats where we reporte the bug not voor 11.04

so it would be nice if you fixed also for 10.04

[Jamie Strandboge (jdstrand)]

Bas, as mentioned in comment #1, otrs2 is community maintained and not officially supported so an update will not be made by the security team. If you are able, I suggest posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures.

[Bas van den Dikkenberg (bas-dikkenberg)]

i am not a programmer, but as far is see its te same fix only it also need to be released 10.04

[Rolf Leggewie (r0lf)]

lucid has seen the end of its life and is no longer receiving any updates. Marking the lucid task for this ticket as "Won't Fix".