Stay Secure with the Latest Linux Advisories

security advisorysecurity issueFedora

Fedora 28: FEDORA-2019-944ff52ce6 Moderate: Horde_Image RCE Fix

**Horde_Image 2.5.4** * [mjr] SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. * [mjr] SECURITY: Sanitize image type parameter (PR: 2, Fariskhi Vidyan). * [mjr] Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-944ff52ce6 2019-01-11 02:58:39.927899 --------------------------------------------------------------------------------Name : php-horde-Horde-Image Product : Fedora 28 Version : 2.5.4 Release : 1.fc28 URL : http://pear.horde.org Summary : Horde Image API Description : An Image utility API, with backends for: * GD * GIF * PNG * SVG * SWF * ImageMagick convert command line tool * Imagick Extension Optional dependency: php-pecl-imagick --------------------------------------------------------------------------------Update Information: **Horde_Image 2.5.4** * [mjr] SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. * [mjr] SECURITY: Sanitize image type parameter (PR: 2, Fariskhi Vidyan). * [mjr] Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend. --------------------------------------------------------------------------------ChangeLog: * Wed Jan 2 2019 Remi Collet - 2.5.4-1 - update to 2.5.4 - use range dependencies * Mon Jun 25 2018 Remi Collet - 2.5.3-1 - update to 2.5.3 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-944ff52ce6' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project canbe found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest Ward_Image enhancement for Fedora 28 addresses critical security issues and boosts protection. Explore the details of this update today!. Horde_Image Update,Fedora Security Advisory,Remote Code Execution,Image Type Parameter Fix. . LinuxSecurity.com Team

Jan 11, 2019 Fedora