Stay Secure with the Latest Linux Advisories

security advisoryfedoraxss mitigation

Fedora 25: php-horde-Horde-Mime-Viewer XSS Mitigation - Critical Threat

**Horde_Mime_Viewer 2.2.1** * [jan] SECURITY: Don't render SVG images in the browser to avoid XSS attacks (Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-f5fda29032 2016-09-13 18:03:12.614348 -------------------------------------------------------------------------------- Name : php-horde-Horde-Mime-Viewer Product : Fedora 25 Version : 2.2.1 Release : 1.fc25 URL : http://pear.horde.org Summary : Horde MIME Viewer Library Description : Provides rendering drivers for MIME data. -------------------------------------------------------------------------------- Update Information: **Horde_Mime_Viewer 2.2.1** * [jan] SECURITY: Don't render SVG images in the browser to avoid XSS attacks (Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program). -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update php-horde-Horde-Mime-Viewer' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Horde MIME Viewer in Fedora 25 receives a security patch to block SVG rendering, addressing potential XSS vulnerabilities.. Fedora 25 Security Update, Horde MIME Fix, XSS Prevention, PHP Horde Security. . Severity: Critical. LinuxSecurity.com Team

Sep 13, 2016 •Critical Fedora