Bug#314374: SquirrelMail cross site scripting vulnerabilities [CAN-2005-1769]

2005-07-01 Thread Thijs Kinkhorst
Hello, Update: A new vulnerability has been discovered in squirrelmail. We'll release one advisory for this one and the new one (to be announced soon). Thijs -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#314374: SquirrelMail cross site scripting vulnerabilities [CAN-2005-1769]

2005-06-22 Thread Thijs Kinkhorst
> We're working on this. An updated package for sarge / etch / sid has > been prepared and will be tested. > > Backporting to woody is not trivial (the code is more than 4 years old), > but we'll do a best effort. The patches have been applied or backported for both stable/testing/unstable (same v

Bug#314374: SquirrelMail cross site scripting vulnerabilities [CAN-2005-1769]]

2005-06-15 Thread Thijs Kinkhorst
Package: squirrelmail Version: 1.4.4-5 Tags: security fixed-upstream patch > Several cross site scripting (XSS) vulnerabilties have been discovered > in SquirrelMail versions 1.4.0 - 1.4.4. These have been addressed in a > patch that can be found at [1]. We advise all our users to apply this > pat