Download: http://www.courier-mta.org/download.php#sqwebmail

Changes:

â When displaying full headers special HTML characters were not escaped,
making it possible for maliciously-crafted E-mail messages to run Javascript
scripts.  This only occurs when displaying full headers.  Patch for earlier
versions of sqwebmail:
http://www.courier-mta.org/beta/patches/sqwebmail-header-fix/README

â Purging the trash folder didn't update the quota correctly if compiled
with --with-trashquota.

â Improve MIME encoding of message headers for East Asian character sets,
and in general.  Sqwebmail has now logic to chose base64 in favor of
quoted-printable, where appropriate.

â Diagnostic message if the shared index file does not exist.


Attachment: pgpEspGurGtMt.pgp
Description: PGP signature

Reply via email to