Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 23: Security Update for Horde Permissions and XSS Fix (XSS Issues)

fedora
Calendar Grey December 28, 2015
Dist Fedora Esm H88
Critical enhancement for Horde access controls in Fedora 23 responding to XSS threats and boosting performance.
**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security)

Summary

The Perms package provides an interface to the Horde permissions system.

Update Information:

**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security). * [mjr] Support sending MDN via ActiveSync (Request #23080). **Horde_Core 2.22.3** * [mjr] Fix issue with synchronizing IMAP folder names that contain only numbers. **Horde_Perms 2.1.6** * [mjr] Use NULL instead of an empty string in the perms_parents field for root permissions. **Horde_Service_Weather 2.3.1** * [jan] Fix undefined variable warnings.

Topics%20covered

Topics Covered

security advisory software update Fedora XSS security fix permissions Horde

Change Log

References

Fedora Update Notification FEDORA-2015-a3c9048cdd 2015-12-28 19:20:02.187148
Name : php-horde-Horde-Perms Product : Fedora 23 Version : 2.1.6 Release : 1.fc23 URL : http://pear.horde.org Summary : Horde Permissions System Description : The Perms package provides an interface to the Horde permissions system.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Perms' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Perms
Product: Fedora 23
Version: 2.1.6
Release: 1.fc23
URL: http://pear.horde.org
Summary: Horde Permissions System

Topics%20covered

Topics Covered

security advisory software update Fedora XSS security fix permissions Horde

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here