Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

Fedora 21: FEDORA-2015-11287 Moderate: Horde_Form XSS Fix

fedora
Calendar Grey July 21, 2015
Dist Fedora Esm H88
Fedora 21 is releasing an urgent update for php-horde-Horde-Form to resolve critical XSS and authentication vulnerabilities, urging users to update promptly
**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer

Summary

The Horde_Form package provides form rendering, validation, and other

functionality for the Horde Application Framework.

Update Information:

**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer.

**Horde_Icalendar 2.1.1** * [jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker).

**Horde_Auth 2.1.10** * [jan] SECURITY: Don't allow to login to LDAP with an emtpy password.

**Horde_Core 2.20.6** * [jan] SECURITY: Don't allow to login with an emtpy password. * [jan] Give administrators access to all groups, even with $conf['share']['any_group'] disabled.

Topics%20covered

Topics Covered

security advisory Fedora XSS security fix php-horde Horde_Form

Change Log

* Mon Jul 6 2015 Remi Collet - 2.0.10-1 - Update to 2.0.10 - add provides php-composer(horde/horde-form) - raise dependency on Horde_Translation 2.2.0

References

Fedora Update Notification FEDORA-2015-11287 2015-07-10 16:34:10
Name : php-horde-Horde-Form Product : Fedora 21 Version : 2.0.10 Release : 1.fc21 URL : http://pear.horde.org Summary : Horde Form API Description : The Horde_Form package provides form rendering, validation, and other functionality for the Horde Application Framework.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Form' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: php-horde-Horde-Form
Product: Fedora 21
Version: 2.0.10
Release: 1.fc21
URL: http://pear.horde.org
Summary: Horde Form API

Topics%20covered

Topics Covered

security advisory Fedora XSS security fix php-horde Horde_Form

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here