Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Ubuntu 18.04 LTS: USN-7502-1 critical: Horde Css Parser remote execution

ubuntu
Calendar Grey May 7, 2025
Scroller Ubuntu
Horde PHP Library weakness in Ubuntu may allow remote command execution; users should update their systems for versions 16.04 and 18.04 immediately.
Horde Css Parser could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

Horde Css Parser could be made to crash or run programs as your login if

it opened a specially crafted file.

Software Description:

- php-horde-css-parser: ${phppear:summary}

Details:

It was discovered that Horde Css Parser did not correctly handle

parsing uncontrolled CSS data. An attacker could possibly use

this issue to perform remote code execution. (CVE-2020-13756)

Topics%20covered

Topics Covered

security advisory remote code execution Ubuntu update instructions php-horde software description

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
   php-horde-css-parser            1.0.11-1ubuntu1+esm1
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   php-horde-css-parser            1.0.8-1ubuntu1+esm1
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7502-1

  CVE-2020-13756

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory remote code execution Ubuntu update instructions php-horde software description

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.