Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 22: Critical XSS and Authentication Issues from 2015-11261

fedora
Calendar Grey July 21, 2015
Dist Fedora Esm H88
Recent security patch fixes XSS vulnerabilities and login authentication flaws in Fedora 22. Protect your system!
**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer

Summary

These classes provide the core functionality of the Horde Application

Framework.

Update Information:

**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer.

**Horde_Icalendar 2.1.1** * [jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker).

**Horde_Auth 2.1.10** * [jan] SECURITY: Don't allow to login to LDAP with an emtpy password.

**Horde_Core 2.20.6** * [jan] SECURITY: Don't allow to login with an emtpy password. * [jan] Give administrators access to all groups, even with $conf['share']['any_group'] disabled.

Topics%20covered

Topics Covered

security advisory security update Fedora XSS authentication PHP Horde

Change Log

* Tue Jul 7 2015 Remi Collet - 2.20.6-1 - Update to 2.20.6 * Fri Jun 12 2015 Remi Collet - 2.20.5-1 - Update to 2.20.5 * Tue Jun 2 2015 Remi Collet - 2.20.4-1 - Update to 2.20.4 * Fri May 29 2015 Remi Collet - 2.20.3-1 - Update to 2.20.3 * Tue May 19 2015 Remi Collet - 2.20.2-1 - Update to 2.20.2 * Tue May 19 2015 Remi Collet - 2.20.1-1 - Update to 2.20.1

References

Fedora Update Notification FEDORA-2015-11261 2015-07-10 16:32:56
Name : php-horde-Horde-Core Product : Fedora 22 Version : 2.20.6 Release : 1.fc22 URL : http://pear.horde.org Summary : Horde Core Framework libraries Description : These classes provide the core functionality of the Horde Application Framework.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Core' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Core
Product: Fedora 22
Version: 2.20.6
Release: 1.fc22
URL: http://pear.horde.org
Summary: Horde Core Framework libraries

Topics%20covered

Topics Covered

security advisory security update Fedora XSS authentication PHP Horde

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here