Stay Secure with the Latest Linux Advisories

security advisoryFedoraXSS

Fedora 22: 2015-d799a5e72b Moderate: PHP-Horde Weather Service XSS Fix

**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security). * [mjr] Support sending MDN via ActiveSync (Request #23080). **Horde_Core 2.22.3** * [mjr] Fix issue with synchronizing IMAP folder names that contain only numbers. **Horde_Perms 2.1.6** * [mjr] Use NULL instead of an empty string in the perms_parents field. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-d799a5e72b 2015-12-30 21:35:46.515334 -------------------------------------------------------------------------------- Name : php-horde-Horde-Service-Weather Product : Fedora 22 Version : 2.3.1 Release : 1.fc22 URL : http://pear.horde.org Summary : Horde Weather Provider Description : Set of classes that provide an abstraction to various online weather service providers. Includes drivers for WeatherUnderground, WorldWeatherOnline, and Google Weather. -------------------------------------------------------------------------------- Update Information: **Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion Information Security). * [mjr] Support sending MDN via ActiveSync (Request #23080). **Horde_Core 2.22.3** * [mjr] Fix issue with synchronizing IMAP folder names that contain only numbers. **Horde_Perms 2.1.6** * [mjr] Use NULL instead of an empty string in the perms_parents field for root permissions. **Horde_Service_Weather 2.3.1** * [jan] Fix undefined variable warnings. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Service-Weather' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Protect your Fedora 22 environment by applying updates for php-horde-Horde-Service-Weather, which resolve XSS vulnerabilities and additional issues. Get started today!. php horde security update, Fedora 22 update, horde service weather. . LinuxSecurity.com Team

Dec 31, 2015 Fedora