Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

Fedora 32: FEDORA-2020-a41fda3b4c Moderate: php-Horde JavaScript Injection

fedora
Calendar Grey June 23, 2020
Dist Fedora Esm H88
Enhance mobile login security in Fedora's php-Horde by implementing strategies like input sanitization, CSP, output escaping, prepared statements, and two-factor authentication
**horde 5.2.23** * [mjr] SECURITY: Fix javascript injection vulnerability in mobile login page

Summary

The Horde Application Framework is a flexible, modular, general-purpose web

application framework written in PHP. It provides an extensive array of

components that are targeted at the common problems and tasks involved in

developing modern web applications. It is the basis for a large number of

production-level web applications, notably the Horde Groupware suites. For

more information on Horde or the Horde Groupware suites, visit

https://www.horde.org/

**horde 5.2.23** * [mjr] SECURITY: Fix javascript injection vulnerability in

mobile login page. * [mjr] Fix broken cloud search in portal block.

* Mon Jun 15 2020 Remi Collet - 5.2.23-1

- update to 5.2.23

* Tue Jun 2 2020 Remi Collet - 5.2.22-2

- requires php(httpd)

su -c 'dnf upgrade --advisory FEDORA-2020-a41fda3b4c' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Product: Fedora 32
Version: 5.2.23
Release: 1.fc32
Summary: Horde Application Framework

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here