Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity issue

Fedora 28: FEDORA-2018-d2345gfhb9 Low: SquirrelMail Input Validation

fix insufficient escaping of user-supplied data (CVE-2017-7692). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-a7161eb173 2017-06-09 18:48:36.526675 --------------------------------------------------------------------------------Name : squirrelmail Product : Fedora 26 Version : 1.4.22 Release : 19.fc26 URL : https://www.squirrelmail.org/ Summary : webmail client written in php Description : SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 (with no JavaScript) for maximum compatibility across browsers. It has very few requirements and is very easy to configure and install. --------------------------------------------------------------------------------Update Information: fix insufficient escaping of user-supplied data (CVE-2017-7692) --------------------------------------------------------------------------------References: [ 1 ] Bug #1445165 - CVE-2017-7692 squirrelmail: Insufficient escaping of user-supplied data https://bugzilla.redhat.com/show_bug.cgi?id=1445165 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade squirrelmail' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . A recent patch forSquirrelMail in Fedora addresses issues related to inadequate sanitization of user-provided information, enhancing the overall security posture.. SquirrelMail Security Update, Fedora 26, Escaping Security Issue. . Severity: Important. LinuxSecurity.com Team

Jun 09, 2017 •Important Fedora