Package: squirrelmail Version: 2:1.4.4-7 Severity: important The changelog at http://www.squirrelmail.org/changelog.php says for 1.4.6:
- Security: Prohibit IMAP injection attempts (reported by Vicente Aguilera) [CVE-2006-0377]. -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.8-2-686-smp Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1) Versions of packages squirrelmail depends on: ii apache [httpd] 1.3.33-6sarge1 versatile, high-performance HTTP s ii apache-perl [httpd] 1.3.33-6sarge1 versatile, high-performance HTTP s ii lighttpd [httpd] 1.4.9-4bpo1 A fast webserver with minimal memo ii perl 5.8.4-8sarge3 Larry Wall's Practical Extraction ii php4 4:4.3.10-16 server-side, HTML-embedded scripti ii squirrelmail-locales 1.4.4-20050308-1 Translations for the SquirrelMail -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]