[SECURITY] [DLA 1592-1] otrs2 security update

2018-11-23 Thread Markus Koschany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: otrs2 Version: 3.3.18-1+deb8u7 CVE ID : CVE-2018-19141 CVE-2018-19143 Two security vulnerabilities were discovered in OTRS, a Ticket Request System, that may lead to privilege escalation or arbitrary file write. CVE

[SECURITY] [DLA 1591-1] libphp-phpmailer security update

2018-11-23 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: libphp-phpmailer Version: 5.2.9+dfsg-2+deb8u4 CVE IDs: CVE-2017-5223 CVE-2018-19296 It was discovered that there were two vulnerabilities libphp-phpmailer, an email library for the PHP programming language: * CVE-