[pkg-horde] Bug#837148: enable CSRF token for configuration form and portal layout forms

Mathieu Parent math.parent at gmail.com
Fri Sep 9 09:04:50 UTC 2016


Package: php-horde-core
Version: 2.24.0+debian0-1
Severity: important
Tags: security sid jessie
Control: found -1 2.15.0+debian0-1+deb8u1

Hello,

In the recent bunch of updates to Horde, I found those:

https://github.com/horde/horde/commit/4035ab12e5f6496df7df23fc6250b404f0e8592e

and

https://github.com/horde/horde/commit/2c4fa7e913afadc68f4d78f57994f0ce9a67787b

Will upload lastest version to sid shortly, and I plan to fix this in
jessie too.

Regards

-- 
Mathieu Parent



More information about the pkg-horde-hackers mailing list