Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 579
Alerts This Week
Warning Icon 1 579

Ubuntu 16.04 LTS USN-4669-1 High: SquirrelMail XSS Denial of Service

ubuntu
Calendar Grey December 10, 2020
Dist Ubuntu Esm H88
PigeonMail on Ubuntu 20.04 LTS is vulnerable to failures from malicious inputs resulting in CSRF vulnerabilities.
SquirrelMail could be made to crash if it received specially crafted input.

Summary

SquirrelMail could be made to crash if it received specially crafted

input.

Software Description:

- squirrelmail: Webmail for nuts

Details:

It was discovered that a cross-site scripting (XSS) vulnerability in

SquirrelMail allows remote attackers to use malicious script content from

HTML e-mail to execute code and/or provoke a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service squirrelmail xss ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  squirrelmail                    2:1.4.23~svn20120406-2+deb8u3ubuntu0.16.04.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4669-1

CVE-2019-12970

December 10, 2020

Topics%20covered

Topics Covered

security advisory denial of service squirrelmail xss ubuntu

Package Information

https://launchpad.net/ubuntu/+source/squirrelmail/2:1.4.23~svn20120406-2+deb8u3ubuntu0.16.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.