--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-f5fda29032
2016-09-13 18:03:12.614348
--------------------------------------------------------------------------------

Name        : php-horde-Horde-Mime-Viewer
Product     : Fedora 25
Version     : 2.2.1
Release     : 1.fc25
URL         : http://pear.horde.org
Summary     : Horde MIME Viewer Library
Description :
Provides rendering drivers for MIME data.

--------------------------------------------------------------------------------
Update Information:

**Horde_Mime_Viewer 2.2.1**  * [jan] SECURITY: Don't render SVG images in the
browser to avoid XSS attacks (Reported by Dawid Gounski via Beyond Security's
SecuriTeam Secure Disclosure program).
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use
su -c 'yum update php-horde-Horde-Mime-Viewer' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce@lists.fedoraproject.org/

Fedora 25: php-horde-Horde-Mime-Viewer Security Update

September 13, 2016
**Horde_Mime_Viewer 2.2.1** * [jan] SECURITY: Don't render SVG images in the browser to avoid XSS attacks (Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclos...

Summary

Provides rendering drivers for MIME data.

Update Information:

**Horde_Mime_Viewer 2.2.1** * [jan] SECURITY: Don't render SVG images in the browser to avoid XSS attacks (Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program).

Change Log

References

Fedora Update Notification FEDORA-2016-f5fda29032 2016-09-13 18:03:12.614348 Name : php-horde-Horde-Mime-Viewer Product : Fedora 25 Version : 2.2.1 Release : 1.fc25 URL : http://pear.horde.org Summary : Horde MIME Viewer Library Description : Provides rendering drivers for MIME data.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Mime-Viewer' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : php-horde-Horde-Mime-Viewer
Product : Fedora 25
Version : 2.2.1
Release : 1.fc25
URL : http://pear.horde.org
Summary : Horde MIME Viewer Library

Related News

32.Lock Code Circular Esm H170
2 - 4 min read
In the ever-evolving cybersecurity landscape, a new concern has come to light for Linux admins—a claimed zero-day vulnerability for Local Privilege
34.Key AbstractDigital Esm H170
2 - 4 min read
RansomHub, a Ransomware-as-a-Service (RaaS) platform, has emerged as a significant threat to organizations around the globe. Targeting Windows,
1.Penguin Landscape Esm H170
2 - 4 min read
As digital privacy and security evolves, anonymity cannot be overemphasized. Tails is a live operating system designed to keep its focus on privacy
32.Lock Code Circular Esm H170
2 - 4 min read
The Cybersecurity and Infrastructure Security Agency (CISA) recently added a new Linux kernel privilege escalation bug ( CVE-2024-1086 ) to its
6.EmailConnection Touch Esm H170
2 - 3 min read
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and
20.Lock AbstractDigital Circular Esm H170
2 - 3 min read
Google has released fixes for a high-severity Chromium security flaw ( CVE-2024-5274 ) impacting its widely used Chrome browser and other
20.Lock AbstractDigital Circular Esm H170
1 - 2 min read
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server (apache2) impacting versions
24.Key Code Esm H170
2 - 4 min read
Security researchers recently issued an update detailing how attackers are exploiting a PHP code execution vulnerability to spread TellYouThePass

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved