Gentoo Security Advisory GLSA 200805-01 (horde)

Summary
The remote host is missing updates announced in advisory GLSA 200805-01.
Solution
All Horde Application Framework users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-3.1.7' All horde-groupware users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-groupware-1.0.5' All horde-kronolith users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-kronolith-2.1.7' All horde-mnemo users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-mnemo-2.1.2' All horde-nag users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-nag-2.1.4' All horde-webmail users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-webmail-1.0.6' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200805-01 http://bugs.gentoo.org/show_bug.cgi?id=212635 http://bugs.gentoo.org/show_bug.cgi?id=213493
Insight
Multiple vulnerabilities in the Horde Application Framework may lead to the execution of arbitrary files, information disclosure, and allow a remote attacker to bypass security restrictions.