OTRS Security Advisory 2010-03: OTRS 3.0.10 (Cancún Beach)

[jojo]

++++++++++ OTRS Security Advisory 2011-03 OTRS 3.0.10 ++++++++++

Release: OTRS Help Desk 3.0.10
Status: stable
Code Name: Cancún Beach, México

We aree proud to announce that the latest patch level release of OTRS
3.0 (codename: Cancún Beach, México) has been released.

Security Issues
===============
* [ http://otrs.org/advisory/OSA-2011-03-en/ ]

Important for Upgrading
=======================
* From OTRS 3.0.x: Make sure you run bin/otrs.RebuildConfig.pl after
the upgrade so that the configuration is refreshed. Otherwise the
system may not work.

* From OTRS 2.4.x: Please read the UPGRADING and INSTALL files for
detailed instructions.

Warning
=======
OTRS versions from 3.0.beta1 up to 3.0.2 were affected by a bug in the
GenericAgent which could cause the "Ticket Delete" flag to be active
by default for new GenericAgent jobs, depending on the locale. If you
used one of the affected versions and have created new GenericAgent
jobs with them, please review them to check if the "Ticket Delete"
flag indeed has the correct value. Otherwise unwanted data loss might
occur.

Improvements
============
* Updated Lithuanian translation, thanks to Edgaras Lukoschevidsius!

Bug Fixes
=========
* Bug#7518 - Escalation Notify by not working properly.
[http://bugs.otrs.org/show_bug.cgi?id=7518]

* Bug#7527 - Calling AgentTicketPhone with pre-selected values fails on
ticket status of type "pending XYZ".
[http://bugs.otrs.org/show_bug.cgi?id=7527]

* Bug#7097 - Length of name of event based notifications limited in the
admin interface.
[http://bugs.otrs.org/show_bug.cgi?id=7097]

* Bug#7477 - Dashboard shows "My Queues" even if a queue is preselected
in the configuration.
[http://bugs.otrs.org/show_bug.cgi?id=7477]

* Bug#6348 - GenericAgent cron job concurrency issues.
[http://bugs.otrs.org/show_bug.cgi?id=6348]

* Bug#7502 - crontab.txt empty on Win32.
[http://bugs.otrs.org/show_bug.cgi?id=7502]

* Bug#7015 - Closing split ticked assigned to different agents causes
"Locked Tickets Total" to be negative (or off by one).
[http://bugs.otrs.org/show_bug.cgi?id=7015]

* Bug#7362 - AuthSyncModule::LDAP::!UserSyncMap with multiple auth backends.
[http://bugs.otrs.org/show_bug.cgi?id=7362]

* Bug#7472 - TicketSearch for FreeTexts with _ in string not working on
Oracle.
[http://bugs.otrs.org/show_bug.cgi?id=7472]

* Bug#7484 - Customer items too much right-aligned in customer
information box.
[http://bugs.otrs.org/show_bug.cgi?id=7484]

* Bug#7434 - CustomerTicketOverview.dtl - closing listitems missing in HTML.
[http://bugs.otrs.org/show_bug.cgi?id=7434]

The detailed ChangeLog can be found at:
http://source.otrs.org/viewvc.cgi/otrs/ ... iew=markup.

Supported Encodings
===================

* The default internal character set of OTRS was changed to UTF-8.
Please see the UPGRADING file if you upgrade from an older version of
OTRS for any implications this may have for you.

* We recommend to change existing non-UTF-8 installations of OTRS to
UTF-8 with the upgrade to 3.0.

* All other encodings are now deprecated.

* OTRS 3.1 will only allow UTF-8 as internal character set.

Browser Support for the Agent Interface
=======================================

* JavaScript is required to use the agent interface.

These browsers are not supported:

* Microsoft Internet Explorer before version 7
* Firefox before version 3
* All versions of Netscape

Software Download
=================

* [ http://otrs.org/downloads/ ] (Germany/Hamburg)
* [ ftp://ftp.otrs.org/pub/otrs/ ] (Germany/Hamburg)

A complete list of all download mirrors is available at
[ http://otrs.org/downloads/ ].

MD5 Messages Digest (128-bit) Checksums
=======================================
6edfd4066e68d77e19b063f9c685baf5
http://ftp.otrs.org/pub/otrs/RPMS/suse/ ... noarch.rpm
8a56113af5e293c43adece9ddc838370
http://ftp.otrs.org/pub/otrs/RPMS/suse/ ... noarch.rpm
7d20263408ce9fae21e08c3b8b3b7c1f
http://ftp.otrs.org/pub/otrs/RPMS/suse/ ... noarch.rpm
c1884d3558c4d736bd968df8fc9f5e06
http://ftp.otrs.org/pub/otrs/RPMS/suse/ ... noarch.rpm
283767f8294573e9e65ce817f6a3ea31
http://ftp.otrs.org/pub/otrs/RPMS/fedor ... noarch.rpm
40f149c9a5cb9478b2dcf434bf448b98
http://ftp.otrs.org/pub/otrs/otrs-3.0.10.tar.gz
886be1bf430d0e6c306201c891e46cfb
http://ftp.otrs.org/pub/otrs/otrs-3.0.10.tar.bz2
3ba94a5ca88dd9d4e1a1704e30ed7998
http://ftp.otrs.org/pub/otrs/otrs-3.0.10.zip
23A47993956E87C45465ECD094C81E23
http://ftp.otrs.org/pub/otrs/otrs-3.0.1 ... -2.4.4.exe

Feedback & Bug Reporting
=========================
We appreciate your contributions! As always, you are re encouraged to
tell us what you think, using this feedback e-Mail: [feedback at
otrs.org] or by filing a bug in Bugzilla [ http://bugs.otrs.org ].

Professional Services
======================
OTRS Group provides a full set of services for each phase of
deployment. Plan, custom engineer, deploy and scale with confidence by
relying on our unparalleled expertise.
[ http://www.otrs.com/en/services/ ]

Community Services
=========================
* User Forums
[ http://forums.otrs.org/ ]

* Mailing Lists
[ http://lists.otrs.org/ ]

* Knowledge Database (FAQ)
[ http://faq.otrs.org/ ]

* Brainstorm / Ideas
[ http://otrsteam.ideascale.com/ ]