Fedora Core 3 FEDORA-2004-472 Moderate: XSS Vulnerability in SquirrelMail

SquirrelMail is a standards-based webmail package written in PHP4. It

includes built-in pure PHP support for the IMAP and SMTP protocols, and

all pages render in pure HTML 4.0 (with no Javascript) for maximum

compatibility across browsers. It has very few requirements and is very

easy to configure and install. SquirrelMail has all the functionality

you would want from an email client, including strong MIME support,

address books, and folder manipulation.

* Fri Nov 19 2004 Warren Togami <wtogami@redhat.com> 1.4.3a-6.FC3

- FC3

* Fri Nov 19 2004 Warren Togami <wtogami@redhat.com> 1.4.3a-7

- CAN-2004-1036 Cross Site Scripting in encoded text

- #112769 updated splash screens

This update can be downloaded from:

f3214fb13b71f13ac46fe6c440c09ad4 SRPMS/squirrelmail-1.4.3a-6.FC3.src.rpm

e0ff639d45092e5c1130c35b0dd6fbea

x86_64/squirrelmail-1.4.3a-6.FC3.noarch.rpm

e0ff639d45092e5c1130c35b0dd6fbea i386/squirrelmail-1.4.3a-6.FC3.noarch.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

--

fedora-announce-list mailing list

fedora-announce-list@redhat.com

fedora-announce-list Info Page