Package: imp4
Version: 4.1.3-4
Severity: grave
Tags: security
Justification: user security hole

http://lists.horde.org/archives/announce/2007/000316.html mentions a new 
version of horde, most important are:
    * Fixed XSS vulnerabilities in the search screen and thread view.

I would like to see a fixed version of imp4 :P

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.20.1
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages imp4 depends on:
ii  horde3                   3.1.3-4         horde web application framework
ii  php-mail-mime            1.3.1-1.1       PHP PEAR module for creating and d
ii  php4-imap                6:4.4.4-8+etch1 IMAP module for php4
ii  php5-imap                5.2.0-8+etch1   IMAP module for php5

Versions of packages imp4 recommends:
ii  locales                     2.3.6.ds1-13 GNU C Library: National Language (

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to