LWN.net Logo

Fedora alert FEDORA-2008-2040 (turba)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 7 Update: turba-2.1.7-1.fc7
Date:  Thu, 28 Feb 2008 14:35:48 -0700
Message-ID:  <200802282135.m1SLZge8025976@bastion.fedora.phx.redhat.com>

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2040 2008-02-28 21:07:36 -------------------------------------------------------------------------------- Name : turba Product : Fedora 7 Version : 2.1.7 Release : 1.fc7 URL : http://www.horde.org/ Summary : The Horde contact management application Description : Turba is the Horde contact management application, which allows access to and storage of personal contacts (including name, email address, phone number, and other easily customizable fields). Turba integrates with IMP (Horde's webmail application) as its address book. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information (including help with Turba) please visit http://www.horde.org/. -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 26 2008 Jan ONDREJ (SAL) <ondrejj(at)salstar.sk> 2.1.7-1 - Update to upstream: CVE-2008-0807: turba: insufficient access checks * Mon Jan 14 2008 Brandon Holbrook <fedora at theholbrooks.org> 2.1.6-1 - Upgraded to 2.1.6 * Sat Oct 20 2007 Brandon Holbrook <fedora at theholbrooks.org> 2.1.5-1 - Upgraded to 2.1.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #432027 - CVE-2008-0807 turba: insufficient access checks https://bugzilla.redhat.com/show_bug.cgi?id=432027 [ 2 ] Bug #428625 - CVE-2007-6018 horde: input validation vulnerabilities https://bugzilla.redhat.com/show_bug.cgi?id=428625 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update turba' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2009, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds