Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

horde4-imp: cross-site scripting

Package(s):

horde4-imp

CVE #(s):

CVE-2012-5565

Created:

December 7, 2012

Updated:

December 12, 2012

Description:

From the openSUSE advisory:

This version update to version 5.0.24 addresses CVE-2012-5565 (bnc#791179) to fix XSS vulnerabilities on the compose page (traditional view), the contacts popup window, and with certain IMAP mailbox names.

Alerts:

openSUSE

openSUSE-SU-2012:1626-1

2012-12-07

(Log in to post comments)