Alerts This Week
Warning Icon 1 1,020
Alerts This Week
Warning Icon 1 1,020

Debian 11: DLA-3923-1 critical: php-horde-turba deserialization issue

debian lts
Calendar Grey October 19, 2024
Dist Debian Esm H88
Ubuntu Security Notice USN-5220-2 addresses a severe vulnerability in the python-django framework’s secure cookie handling. Ensure your systems are updated!
It was discovered that there was an arbitrary object deserialization vulnerability in php-horde-turba, an address book component for the Horde groupware suite
Topics%20covered

Topics Covered

security advisory security patch Debian LTS php-horde-turba arbitrary deserialization address book component

Summary

For Debian 11 bullseye, this problem has been fixed in version
4.2.25-5+deb11u2

We recommend that you upgrade your php-horde-turba packages.

For the detailed security status of php-horde-turba please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/php-horde-turba

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Note:
4.2.25-5+deb11u1 had been uploaded incorrectly and thus never reached
the archived. 4.2.25-5+deb11u2 is a no-change re-upload to correct
this mistake.


Severity
critical
Lowest
Low
Medium
High
Critical

Package: php-horde-turba
Version: 4.2.25-5+deb11u2
CVE ID: CVE-2022-30287
Debian Bug: 1012279

Topics%20covered

Topics Covered

security advisory security patch Debian LTS php-horde-turba arbitrary deserialization address book component

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here