A new Debian Linux update has been published: DLA 2230-1: php-horde security update
A php-horde security update has been released for Debian GNU/Linux 8 LTS to address a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload.Read more @ Linux Compatible