Cross-Site Scripting in php-horde-turba
ID: | FEDORA-2019-6119518602 |
Distribution: | Fedora |
Plattformen: | Fedora 29 |
Datum: | Do, 2. Mai 2019, 07:06 |
Referenzen: | Keine Angabe |
Applikationen: | Turba |
Originalnachricht |
|
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-6119518602 2019-05-02 03:05:46.856501 -------------------------------------------------------------------------------- Name : php-horde-turba Product : Fedora 29 Version : 4.2.24 Release : 1.fc29 URL : http://www.horde.org/apps/turba Summary : A web based address book Description : Turba is the Horde contact management application. Leveraging the Horde framework to provide seamless integration with IMP and other Horde applications, it supports storing contacts in SQL, LDAP, Kolab, and IMSP address books. -------------------------------------------------------------------------------- Update Information: **turba 4.2.24** * [mjr] SECURITY: Fix XSS vulnerability in display of contact tags. * [jan] Clarify objectClass filter examples for LDAP backends (Ralf Lang). -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 23 2019 Remi Collet |