Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisoryfedoraupdateFedora 31: FEDORA-2020-1a968aeb47 Critical: Horde XSS Fixes
**horde 5.2.22** * [jan] SECURITY: Protect image processing service from rendering active SVG content within the browser. * [jan] SECURITY: Fix XSS vulnerabilities in administration interface. * [jan] Support Redis Sentinel configuration (Michael Menge , Request #14998). * [jan] Use file hashing for detecting outdated configuration files.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-1a968aeb47 2020-04-30 03:42:10.988004 --------------------------------------------------------------------------------Name : php-horde-horde Product : Fedora 31 Version : 5.2.22 Release : 1.fc31 URL : https://www.horde.org/apps/horde Summary : Horde Application Framework Description : The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of production-level web applications, notably the Horde Groupware suites. For more information on Horde or the Horde Groupware suites, visit https://www.horde.org/ --------------------------------------------------------------------------------Update Information: **horde 5.2.22** * [jan] SECURITY: Protect image processing service from rendering active SVG content within the browser. * [jan] SECURITY: Fix XSS vulnerabilities in administration interface. * [jan] Support Redis Sentinel configuration (Michael Menge , Request #14998). * [jan] Use file hashing for detecting outdated configuration files. --------------------------------------------------------------------------------ChangeLog: * Tue Apr 21 2020 Remi Collet - 5.2.22-1 - update to 5.2.22 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2020-1a968aeb47' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 29, 2020
•Critical
Fedora
89
security advisoryfedoraservice updateFedora 30: FEDORA-2020-fd8761fd13 Critical XSS Fix for Horde Service
**horde 5.2.22** * [jan] SECURITY: Protect image processing service from rendering active SVG content within the browser. * [jan] SECURITY: Fix XSS vulnerabilities in administration interface. * [jan] Support Redis Sentinel configuration (Michael Menge , Request #14998). * [jan] Use file hashing for detecting outdated configuration files.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-fd8761fd13 2020-04-30 02:50:26.526508 --------------------------------------------------------------------------------Name : php-horde-horde Product : Fedora 30 Version : 5.2.22 Release : 1.fc30 URL : https://www.horde.org/apps/horde Summary : Horde Application Framework Description : The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of production-level web applications, notably the Horde Groupware suites. For more information on Horde or the Horde Groupware suites, visit https://www.horde.org/ --------------------------------------------------------------------------------Update Information: **horde 5.2.22** * [jan] SECURITY: Protect image processing service from rendering active SVG content within the browser. * [jan] SECURITY: Fix XSS vulnerabilities in administration interface. * [jan] Support Redis Sentinel configuration (Michael Menge , Request #14998). * [jan] Use file hashing for detecting outdated configuration files. --------------------------------------------------------------------------------ChangeLog: * Tue Apr 21 2020 Remi Collet - 5.2.22-1 - update to 5.2.22 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2020-fd8761fd13' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 29, 2020
•Critical
Fedora
197
security advisoryremote code executiondebianDebian: DLA-2162-1 Critical: php-horde-form Remote Code Execution
A remote code execution vulnerability was discovered in the Form API component of the Horde Application Framework. An authenticated remote attacker could use this flaw to upload arbitrary content to an arbitrary . Package : php-horde-form Version : 2.0.8-2+deb8u2 CVE ID : CVE-2020-8866 Debian Bug : 955020 A remote code execution vulnerability was discovered in the Form API component of the Horde Application Framework. An authenticated remote attacker could use this flaw to upload arbitrary content to an arbitrary writable location on the server and potentially execute code in the context of the web server user. For Debian 8 "Jessie", this problem has been fixed in version 2.0.8-2+deb8u2. We recommend that you upgrade your php-horde-form packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance php-horde-form to resolve vulnerabilities leading to remote code execution in Debian 8. Urgent security patch essential for web app protection.. remote code execution, horde framework, debian update, php security. . Severity: Critical. LinuxSecurity.com Team
Mar 29, 2020
•Critical
Debian LTS
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!