php-horde: multiple vulnerabilities
| Package(s): | php-horde |
CVE #(s): | |
| Created: | July 21, 2015 |
Updated: | July 22, 2015 |
| Description: |
From the Fedora advisory:
**Horde_Form 2.0.10**
* [jan] SECURITY: Fixed XSS in form renderer.
**Horde_Icalendar 2.1.1**
* [jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker).
**Horde_Auth 2.1.10**
* [jan] SECURITY: Don't allow to login to LDAP with an empty password.
**Horde_Core 2.20.6**
* [jan] SECURITY: Don't allow to login with an empty password.
* [jan] Give administrators access to all groups, even with $conf['share']['any_group'] disabled. |
| Alerts: |
|
