Package: squirrelmail
Version: 2:1.4.4-7
Severity: important

The changelog at http://www.squirrelmail.org/changelog.php says for 1.4.6:

  - Security: Prohibit IMAP injection attempts (reported by Vicente
    Aguilera) [CVE-2006-0377].


-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686-smp
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1)

Versions of packages squirrelmail depends on:
ii  apache [httpd]          1.3.33-6sarge1   versatile, high-performance HTTP s
ii  apache-perl [httpd]     1.3.33-6sarge1   versatile, high-performance HTTP s
ii  lighttpd [httpd]        1.4.9-4bpo1      A fast webserver with minimal memo
ii  perl                    5.8.4-8sarge3    Larry Wall's Practical Extraction 
ii  php4                    4:4.3.10-16      server-side, HTML-embedded scripti
ii  squirrelmail-locales    1.4.4-20050308-1 Translations for the SquirrelMail 

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to