Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Fedora 23: FEDORA-2016-084620f386 Low: Horde XSS Issue Fix

fedora
Calendar Grey September 21, 2016
Dist Fedora Esm H88
Address XSS issues in Horde_Text_Filter 2.3.5 for Fedora 23. Implement the update immediately to protect your systems from potential threats.
**Horde_Text_Filter 2.3.5** * [jan] SECURITY: Fix XSS via data:text/html content of form action and xlink attributes (Reported by Liuzhu).

Summary

Common methods for fitering and converting text.

Update Information:

**Horde_Text_Filter 2.3.5** * [jan] SECURITY: Fix XSS via data:text/html content of form action and xlink attributes (Reported by Liuzhu).

Topics%20covered

Topics Covered

security advisory software update Fedora XSS security fix Horde text filter

Change Log

References


[ 1 ] Bug #1375481 - php-horde: XSS with data:html links and form actions https://bugzilla.redhat.com/show_bug.cgi?id=1375481

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Text-Filter' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
low
Lowest
Low
Medium
High
Critical

Name: php-horde-Horde-Text-Filter
Product: Fedora 23
Version: 2.3.5
Release: 1.fc23
URL: http://pear.horde.org/
Summary: Horde Text Filter API

Topics%20covered

Topics Covered

security advisory software update Fedora XSS security fix Horde text filter

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here