Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 23: Security Update for Horde Core Fixes XSS Issues

fedora
Calendar Grey December 28, 2015
Dist Fedora Esm H88
Crucial patch for Horde_Core in Fedora 23 counters XSS vulnerabilities and enhances compatibility with ActiveSync services.
**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security)

Summary

These classes provide the core functionality of the Horde Application

Framework.

Update Information:

**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security). * [mjr] Support sending MDN via ActiveSync (Request #23080). **Horde_Core 2.22.3** * [mjr] Fix issue with synchronizing IMAP folder names that contain only numbers. **Horde_Perms 2.1.6** * [mjr] Use NULL instead of an empty string in the perms_parents field for root permissions. **Horde_Service_Weather 2.3.1** * [jan] Fix undefined variable warnings.

Topics%20covered

Topics Covered

security advisory security update Fedora XSS PHP Horde_Core

Change Log

References

Fedora Update Notification FEDORA-2015-a3c9048cdd 2015-12-28 19:20:02.187148
Name : php-horde-Horde-Core Product : Fedora 23 Version : 2.22.4 Release : 1.fc23 URL : http://pear.horde.org Summary : Horde Core Framework libraries Description : These classes provide the core functionality of the Horde Application Framework.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Core' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Core
Product: Fedora 23
Version: 2.22.4
Release: 1.fc23
URL: http://pear.horde.org
Summary: Horde Core Framework libraries

Topics%20covered

Topics Covered

security advisory security update Fedora XSS PHP Horde_Core

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here