Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 21 Security Advisory: PHP-Horde-Icalendar XSS Fix Critical

fedora
Calendar Grey July 21, 2015
Dist Fedora Esm H88
Fortify your system's defenses by implementing this essential php-horde-Icalendar patch for Fedora 21, which tackles XSS security flaws.
**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer

Summary

An API for dealing with iCalendar data.

Update Information:

**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer.

**Horde_Icalendar 2.1.1** * [jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker).

**Horde_Auth 2.1.10** * [jan] SECURITY: Don't allow to login to LDAP with an emtpy password.

**Horde_Core 2.20.6** * [jan] SECURITY: Don't allow to login with an emtpy password. * [jan] Give administrators access to all groups, even with $conf['share']['any_group'] disabled.

Topics%20covered

Topics Covered

security advisory update Fedora XSS security fix php-horde Horde_Icalendar

Change Log

* Mon Jul 6 2015 Remi Collet - 2.1.1-1 - Update to 2.1.1 * Thu Jun 18 2015 Remi Collet - 2.1.0-1 - Update to 2.1.0 * Tue Apr 28 2015 Remi Collet - 2.0.11-1 - Update to 2.0.11 - add provides php-composer(horde/horde-icalendar) * Tue Nov 25 2014 Remi Collet - 2.0.10-1 - Update to 2.0.10 * Tue Nov 25 2014 Remi Collet - 2.0.9-2 - add upstream patch (thanks Koschei) - drop dependency on Horde_Mime

References

Fedora Update Notification FEDORA-2015-11287 2015-07-10 16:34:10
Name : php-horde-Horde-Icalendar Product : Fedora 21 Version : 2.1.1 Release : 1.fc21 URL : http://pear.horde.org Summary : iCalendar API Description : An API for dealing with iCalendar data.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Icalendar' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Icalendar
Product: Fedora 21
Version: 2.1.1
Release: 1.fc21
URL: http://pear.horde.org
Summary: iCalendar API

Topics%20covered

Topics Covered

security advisory update Fedora XSS security fix php-horde Horde_Icalendar

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here