==========================================================================
Ubuntu Security Notice USN-7502-1
May 07, 2025
php-horde-css-parser vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
Horde Css Parser could be made to crash or run programs as your login if
it opened a specially crafted file.
Software Description:
- php-horde-css-parser: ${phppear:summary}
Details:
It was discovered that Horde Css Parser did not correctly handle
parsing uncontrolled CSS data. An attacker could possibly use
this issue to perform remote code execution. (CVE-2020-13756)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS
php-horde-css-parser 1.0.11-1ubuntu1+esm1
Available with Ubuntu Pro
Ubuntu 16.04 LTS
php-horde-css-parser 1.0.8-1ubuntu1+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-7502-1
<https://ubuntu.com/security/notices/USN-7502-1>
CVE-2020-13756
OpenPGP_0x401EFCBCDA0FF1BD.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
