Package: squirrelmail Version: 2:1.4.4-7 Severity: grave Tags: security Justification: user security hole
There are several security fixes in squirrel mail 1.4.6 which came out 23 February 2006. But the stable version 1.4.4 hasn't changed since August of last year. See http://www.squirrelmail.org/changelog.php and http://www.squirrelmail.org/security/issue/2006-02-01 http://www.squirrelmail.org/security/issue/2006-02-10 http://www.squirrelmail.org/security/issue/2006-02-15 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]