Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 22: php-horde-Horde-Perms Security Advisory - XSS Patch

fedora
Calendar Grey December 31, 2015
Dist Fedora Esm H88
Urgent security patch for php-horde-Horde-Perms addressing vulnerabilities related to XSS and enhancing permission management.
**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security)

Summary

The Perms package provides an interface to the Horde permissions system.

Update Information:

**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security). * [mjr] Support sending MDN via ActiveSync (Request #23080). **Horde_Core 2.22.3** * [mjr] Fix issue with synchronizing IMAP folder names that contain only numbers. **Horde_Perms 2.1.6** * [mjr] Use NULL instead of an empty string in the perms_parents field for root permissions. **Horde_Service_Weather 2.3.1** * [jan] Fix undefined variable warnings.

Topics%20covered

Topics Covered

security advisory fedora security patch permissions xss php-horde

Change Log

References

Fedora Update Notification FEDORA-2015-d799a5e72b 2015-12-30 21:35:46.515334
Name : php-horde-Horde-Perms Product : Fedora 22 Version : 2.1.6 Release : 1.fc22 URL : http://pear.horde.org Summary : Horde Permissions System Description : The Perms package provides an interface to the Horde permissions system.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Perms' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Perms
Product: Fedora 22
Version: 2.1.6
Release: 1.fc22
URL: http://pear.horde.org
Summary: Horde Permissions System

Topics%20covered

Topics Covered

security advisory fedora security patch permissions xss php-horde

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here