Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 27: Security Advisory for php-pear-CAS XSS and Session Problems

**Version 1.3.6** **Security Fixes:** * Fix XSS in proxy mode [#271] (Joachim Fritschi) **Bug Fixes:** * Fix bad condition [#252] (Brice Vercoustre) * Hash ticket strings to generate valid-length session-ids [#224, #244, #248] (Adam Franco) * Fix "phpCAS" class capitalization in code [#273, #277] (phy25) **Improvement:** * Remove fallback for __autoload [#247]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-95695b59c7 2018-11-09 05:56:09.602502 --------------------------------------------------------------------------------Name : php-pear-CAS Product : Fedora 27 Version : 1.3.6 Release : 1.fc27 URL : https://apereo.atlassian.net/wiki/spaces/CASC/overview Summary : Central Authentication Service client library in php Description : This package is a PEAR library for using a Central Authentication Service. Autoloader '%{pear_phpdir}/CAS/Autoload.php'; --------------------------------------------------------------------------------Update Information: **Version 1.3.6** **Security Fixes:** * Fix XSS in proxy mode [#271] (Joachim Fritschi) **Bug Fixes:** * Fix bad condition [#252] (Brice Vercoustre) * Hash ticket strings to generate valid-length session-ids [#224, #244, #248] (Adam Franco) * Fix "phpCAS" class capitalization in code [#273, #277] (phy25) **Improvement:** * Remove fallback for __autoload [#247] (marinaglancy) * More robust check for Windows OS in File.php [#275] (xamount) * Fix continue statement within switch/case for php 7.3 compatibility [#278] (stonk7) --------------------------------------------------------------------------------ChangeLog: * Fri Oct 26 2018 Remi Collet - 1.3.6-1 - update to 1.3.6 - new github and packagist owner --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2018-95695b59c7' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Enhancements for php-pear-CAS on Fedora 27, tackling XSS vulnerabilities and session management concerns, featuring optimizations and error rectifications.. Authentication Library, Fedora Updates, PHP Security, XSS Management. . Severity: Important. LinuxSecurity.com Team

Nov 09, 2018 •Important Fedora