Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora Core 4: FEDORA-2005-780 Critical PHP5 Fix for SquirrelMail

fedora
Calendar Grey August 22, 2005
Dist Fedora Esm H88
The update for SquirrelMail in Fedora Core 4 addresses crucial vulnerabilities in PHP5, specifically the issues identified as CAN-2005-1769 and CAN-2005-2095.
It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squir...

Summary

SquirrelMail is a standards-based webmail package written in PHP4. It

includes built-in pure PHP support for the IMAP and SMTP protocols, and

all pages render in pure HTML 4.0 (with no Javascript) for maximum

compatibility across browsers. It has very few requirements and is very

easy to configure and install. SquirrelMail has all the functionality

you would want from an email client, including strong MIME support,

address books, and folder manipulation.

It probably is not a good idea to push a CVS snapshot here,

but upstream screwed up their 1.4.5 release and CVS contains

further fixes like PHP5 related stuff that might make

squirrelmail usable on FC4. This snapshot worked on my

personal server for the past week, so hopefully it will be

good for everyone else too.

CAN-2005-1769 and CAN-2005-2095 security issues are solved

in this update.

Please report regressions in behavior from our previous

1.4.4 package to Red Hat Bugzilla, product Fedora Core. All

other squirrelmail bugs please report upstream.

- snapshot of 1.4.6 because 1.4.5 upstream was a bad release

this hopefully will also work on PHP5 too...

* Mon Jun 20 2005 Warren Togami 1.4.5-0.rc1

- 1.4.5-0.rc1

508ddbe3e2fadfd928529173321aecb4 SRPMS/squirrelmail-1.4.6-0.cvs20050812.1.fc4.src.rpm

8de6255428c1ba23029430ca8a4e0e43 x86_64/squirrelmail-1.4.6-0.cvs20050812.1.fc4.noarch.rpm

8de6255428c1ba23029430ca8a4e0e43 i386/squirrelmail-1.4.6-0.cvs20050812.1.fc4.noarch.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Name: squirrelmail
Version: 1.4.6
Release: 0.cvs20050812.1.fc4
Summary: SquirrelMail webmail client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here