Package: squirrelmail
Version: 2:1.4.4-7
Severity: grave
Tags: security
Justification: user security hole


There are several security fixes in squirrel mail 1.4.6 which came out
23 February 2006. But the stable version 1.4.4 hasn't changed since
August of last year.

See http://www.squirrelmail.org/changelog.php and

http://www.squirrelmail.org/security/issue/2006-02-01
http://www.squirrelmail.org/security/issue/2006-02-10
http://www.squirrelmail.org/security/issue/2006-02-15


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to