Am 23.11.2017 um 11:44 schrieb Raphael Hertzog: > Hello Thomas & Patrick, Hi Raphael > > The Debian LTS team would like to fix the security issues which are > currently open in the Wheezy version of otrs2: > https://security-tracker.debian.org/tracker/CVE-2017-15864 > https://security-tracker.debian.org/tracker/CVE-2017-16664 > > Would you like to take care of this yourself? > Since Jessie+Wheezy are nearly the same version now, you can just cherry pick both patches from the 3.3.18-1+deb8u2 upload: 16-OSA-2017-06.diff 17-OSA-2017-07.diff
Dont hestiate to ask me, if you need more information -- /* Mit freundlichem Gruß / With kind regards, Patrick Matthäi GNU/Linux Debian Developer Blog: http://www.linux-dev.org/ E-Mail: pmatth...@debian.org patr...@linux-dev.org */