Stay Secure with the Latest Linux Advisories

security advisoryfedorasoftware update

Fedora 25: 2017-17f457262c Critical XSS Fix for Horde URL

**Horde_Url 2.2.6** * [jan] SECURITY: Fix XSS vulnerability with pathinfo component in toString().. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-17f457262c 2017-08-10 15:18:03.832346 --------------------------------------------------------------------------------Name : php-horde-Horde-Url Product : Fedora 25 Version : 2.2.6 Release : 1.fc25 URL : http://pear.horde.org Summary : Horde Url class Description : This class represents a single URL and provides methods for manipulating URLs. --------------------------------------------------------------------------------Update Information: **Horde_Url 2.2.6** * [jan] SECURITY: Fix XSS vulnerability with pathinfo component in toString(). --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade php-horde-Horde-Url' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Address XSS flaw in Horde_Url 2.2.6 for Fedora 25. Use dnf to upgrade for improved security following the guidance from this advisory.. Horde Url Security Update,Fedora PHP Security,Software Update Notification,Pathinfo Component Security. . Severity: Critical. LinuxSecurity.com Team

Aug 10, 2017 •Critical Fedora