Stay Secure with the Latest Linux Advisories

security advisorysecurity issuesoftware update

Fedora 21 php-horde-Horde-Auth 2.1.10 Moderate: XSS and Password Fixes

**Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer. **Horde_Icalendar 2.1.1** * [jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker). **Horde_Auth 2.1.10**. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-11287 2015-07-10 16:34:10 -------------------------------------------------------------------------------- Name : php-horde-Horde-Auth Product : Fedora 21 Version : 2.1.10 Release : 1.fc21 URL : http://pear.horde.org Summary : Horde Authentication API Description : The Horde_Auth package provides a common interface into the various backends for the Horde authentication system. -------------------------------------------------------------------------------- Update Information: **Horde_Form 2.0.10** * [jan] SECURITY: Fixed XSS in form renderer. **Horde_Icalendar 2.1.1** * [jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker). **Horde_Auth 2.1.10** * [jan] SECURITY: Don't allow to login to LDAP with an emtpy password. **Horde_Core 2.20.6** * [jan] SECURITY: Don't allow to login with an emtpy password. * [jan] Give administrators access to all groups, even with $conf['share']['any_group'] disabled. -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 7 2015 Remi Collet - 2.1.10-1 - Update to 2.1.10 * Mon Jun 29 2015 Remi Collet - 2.1.9-1 - Update to 2.1.9 * Tue Apr 28 2015 Remi Collet - 2.1.8-1 - Update to 2.1.8 * Tue Apr 14 2015 Remi Collet - 2.1.7-1 - Update to 2.1.7 - add provides php-composer(horde/horde-auth) - add dependency on Horde_Translation 2.2.0 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Auth' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed withthe Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Cross-site scripting patches and updates for password security in php-horde-Horde-Auth on Fedora 21. Upgrade today for enhanced safety.. Horde Auth Update,Safeguard Applications,Open Source Security,Fedora 21 Update. . LinuxSecurity.com Team

Jul 21, 2015 Fedora