Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 10 DLA-3090-1 Moderate: Php-Horde-Turba Object Deserialization

debian lts
Calendar Grey August 31, 2022
Dist Debian Esm H88
Enhance php-horde-turba to address a security vulnerability related to arbitrary object deserialization highlighted in DLA-3090-1 for Debian platforms.
It was discovered that there was an arbitrary object deserialization vulnerability in php-horde-turba, an address book component for the Horde groupware suite
Topics%20covered

Topics Covered

security advisory moderate Debian arbitrary execution php-horde-turba object deserialization

Summary

For Debian 10 buster, this problem has been fixed in version
4.2.23-1+deb10u1.

We recommend that you upgrade your php-horde-turba packages.

For the detailed security status of php-horde-turba please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/php-horde-turba

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Package: php-horde-turba
Version: 4.2.23-1+deb10u1
CVE ID: CVE-2022-30287
Debian Bug: #1012279

Topics%20covered

Topics Covered

security advisory moderate Debian arbitrary execution php-horde-turba object deserialization

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here