FEDORA-EPEL-2016-c7c4c1e885 — security update for php-horde-Horde-Mime-Viewer

stable

FEDORA-EPEL-2016-c7c4c1e885 created by remi 7 years ago for Fedora EPEL 7

Horde_Mime_Viewer 2.2.1

[jan] SECURITY: Don't render SVG images in the browser to avoid XSS attacks (Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program).

This update has been submitted for testing by remi.

This update has been pushed to testing.

remi edited this update.

This update has been submitted for stable by remi.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

modified

7 years ago

BZ#1375485 php-horde: XSS vulnerability via SVG images

BZ#1375489 php-horde-Horde-Mime-Viewer: php-horde: XSS vulnerability via SVG images [epel-all]

php-horde-Horde-Mime-Viewer-2.2.1-1.el7

None