Fedora alert FEDORA-2008-2087 (turba)

From:
    	     
 
updates@fedoraproject.org
To:
    	     
 
fedora-package-announce@redhat.com
Subject:
    	     
 
[SECURITY] Fedora 8 Update: turba-2.1.7-1.fc8
Date:
    	     
 
Thu, 28 Feb 2008 14:41:46 -0700
Message-ID:
    	     
 
<200802282141.m1SLfEIR026792@bastion.fedora.phx.redhat.com>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2087
2008-02-28 21:12:48
--------------------------------------------------------------------------------

Name        : turba
Product     : Fedora 8
Version     : 2.1.7
Release     : 1.fc8
URL         : http://www.horde.org/
Summary     : The Horde contact management application
Description :
Turba is the Horde contact management application, which allows access
to and storage of personal contacts (including name, email address,
phone number, and other easily customizable fields).  Turba integrates
with IMP (Horde's webmail application) as its address book.

The Horde Project writes web applications in PHP and releases them under
Open Source licenses.  For more information (including help with Turba)
please visit http://www.horde.org/.

--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #428625 - CVE-2007-6018 horde: input validation vulnerabilities
        https://bugzilla.redhat.com/show_bug.cgi?id=428625
  [ 2 ] Bug #432027 - CVE-2008-0807 turba: insufficient access checks
        https://bugzilla.redhat.com/show_bug.cgi?id=432027
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update turba' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-ann...