Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 23: php-horde-Horde-Service-Weather Critical XSS Fix

fedora
Calendar Grey December 28, 2015
Dist Fedora Esm H88
A security patch for Horde on Fedora 23 resolves CSRF vulnerabilities and enhances the performance of ActiveSync services.
**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security)

Summary

Set of classes that provide an abstraction to various online weather

service providers. Includes drivers for WeatherUnderground,

WorldWeatherOnline, and Google Weather.

Update Information:

**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security). * [mjr] Support sending MDN via ActiveSync (Request #23080). **Horde_Core 2.22.3** * [mjr] Fix issue with synchronizing IMAP folder names that contain only numbers. **Horde_Perms 2.1.6** * [mjr] Use NULL instead of an empty string in the perms_parents field for root permissions. **Horde_Service_Weather 2.3.1** * [jan] Fix undefined variable warnings.

Topics%20covered

Topics Covered

security advisory update Fedora service XSS fix Horde weather service

Change Log

References

Fedora Update Notification FEDORA-2015-a3c9048cdd 2015-12-28 19:20:02.187148
Name : php-horde-Horde-Service-Weather Product : Fedora 23 Version : 2.3.1 Release : 1.fc23 URL : http://pear.horde.org Summary : Horde Weather Provider Description : Set of classes that provide an abstraction to various online weather service providers. Includes drivers for WeatherUnderground, WorldWeatherOnline, and Google Weather.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Service-Weather' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Service-Weather
Product: Fedora 23
Version: 2.3.1
Release: 1.fc23
URL: http://pear.horde.org
Summary: Horde Weather Provider

Topics%20covered

Topics Covered

security advisory update Fedora service XSS fix Horde weather service

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here