FEDORA-EPEL-2010-2513 — security update for horde

FEDORA-EPEL-2010-2513 created by nb 11 years ago for Fedora EPEL 5

stable

Upgrade to 3.3.6 - Fixes a lot of security bugs

This update has been pushed to stable

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

11 years ago

in stable

11 years ago

modified

11 years ago

BZ#461886 CVE-2008-3823 horde: XSS via filename of MIME attachments (oCERT-2008-012)

BZ#461887 CVE-2008-3824 horde: XSS via unescaped '/' characters (oCERT-2008-012)

BZ#480818 CVE-2008-5917 horde: IE-specific XSS via image style attribute

BZ#483230 new version available 3.3.3

BZ#490932 CVE-2009-0931 CVE-2009-0932 horde: XSS vulnerability and directory traversal vulnerability

BZ#523401 CVE-2009-3236 Horde: Improper validation of image form fields (local files overwrite)

BZ#523407 CVE-2009-3237 Horde: XSS in "number" type preferences and in MIME rendering

BZ#538227 CVE-2009-3236 CVE-2009-3237 Multiple horde vulnerabilities [Fedora all]

BZ#544429 CVE-2009-0931 CVE-2009-0932 horde: XSS vulnerability and directory traversal vulnerability [Fedora all]

BZ#549506 CVE-2009-3701 horde: PHP_SELF XSS vulnerabilities

BZ#549516 CVE-2009-4363 horde: XSS vulnerability via data: URIs

BZ#549520 CVE-2009-3701 CVE-2009-4363 Multiple horde vulnerabilities [Fedora all]

horde-3.3.6-1.el5