[SECURITY] Fedora 22 Update: php-horde-horde-5.2.8-1.fc22

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

[SECURITY] Fedora 22 Update: php-horde-ingo-3.2.7-1.fc22

Ingo is an email-filter management application. It is fully internationalized, integrated with Horde and the IMP Webmail client, and supports both server-side Sieve, Procmail, Maildrop and client-side IMAP message filtering...

[SECURITY] Fedora 22 Update: php-horde-imp-6.2.11-1.fc22

IMP, the Internet Mail Program, is one of the most popular and widely deployed open source webmail applications in the world. It allows universal, web-based access to IMAP and POP3 mail servers and provides Ajax, mobile and traditional interfaces with a rich range of features normally found only ...

Debian DSA-3391-1 : php-horde - security update

It was discovered that the web-based administration interface in the Horde Application Framework did not guard against Cross-Site Request Forgery CSRF attacks. As a result, other, malicious web pages could cause Horde applications to perform actions as the Horde user. The oldstable distribution...

[SECURITY] [DSA 3391-1] php-horde security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3391-1 [email protected] https://www.debian.org/security/ Florian Weimer November 03, 2015 https://www.debian.org/security/faq -...

DSA-3391-1 php-horde - security update

Bulletin has no description...

Debian Security Advisory DSA 3391-1 (php-horde - security update)

It was discovered that the web-based administration interface in the Horde Application Framework did not guard against Cross-Site Request Forgery CSRF attacks. As a result, other, malicious web pages could cause Horde applications to perform actions as the Horde user. The oldstable distribution...

[SECURITY] Fedora 23 Update: php-horde-passwd-5.0.4-1.fc23

An application to change any user passwords stored in various backends like SQL, LDAP, Kolab, passwd files etc...

[SECURITY] Fedora 23 Update: php-horde-imp-6.2.11-1.fc23

IMP, the Internet Mail Program, is one of the most popular and widely deployed open source webmail applications in the world. It allows universal, web-based access to IMAP and POP3 mail servers and provides Ajax, mobile and traditional interfaces with a rich range of features normally found only ...

[SECURITY] Fedora 23 Update: php-horde-horde-5.2.8-1.fc23

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

[SECURITY] Fedora 23 Update: php-horde-ingo-3.2.7-1.fc23

Ingo is an email-filter management application. It is fully internationalized, integrated with Horde and the IMP Webmail client, and supports both server-side Sieve, Procmail, Maildrop and client-side IMAP message filtering...

Debian: Security Advisory (DSA-3391-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RCE and SQL injection via CSRF in Horde Groupware

High-Tech Bridge Security Research Lab discovered three Cross-Site Request Forgery CSRF vulnerabilities in a popular collaboration suite Horde Groupware, used by a variety of companies around the world. These vulnerabilities are very dangerous, since they can be used in targeted attacks against...

Fedora Update for php-horde-Horde-Auth FEDORA-2015-11287

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Core FEDORA-2015-11287

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Form FEDORA-2015-11261

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Core FEDORA-2015-11261

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Form FEDORA-2015-11287

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : php-horde-Horde-Auth-2.1.10-1.fc22 / php-horde-Horde-Core-2.20.6-1.fc22 / etc (2015-11261)

HordeForm 2.0.10 - jan SECURITY: Fixed XSS in form renderer. HordeIcalendar 2.1.1 - jan Fix generated VALARM TRIGGER attributes with empty duration Ralf Becker. HordeAuth 2.1.10 - jan SECURITY: Don't allow to login to LDAP with an emtpy password. HordeCore 2.20.6 - jan SECURITY: Don't allow to...

Fedora 21 : php-horde-Horde-Auth-2.1.10-1.fc21 / php-horde-Horde-Core-2.20.6-1.fc21 / etc (2015-11287)

HordeForm 2.0.10 - jan SECURITY: Fixed XSS in form renderer. HordeIcalendar 2.1.1 - jan Fix generated VALARM TRIGGER attributes with empty duration Ralf Becker. HordeAuth 2.1.10 - jan SECURITY: Don't allow to login to LDAP with an emtpy password. HordeCore 2.20.6 - jan SECURITY: Don't allow to...