From: Lupe Christoph (lupelupe-christoph.de)
Date: Tue Jun 01 2004 - 16:13:32 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sunday, 2004-05-30 at 03:15:44 +0200, Roman Medina wrote:

> I also noticed that latest Debian stable distro ships a very old
> version of SquirrelMail, which is vulnerable to several old XSS bugs
> (in addition to the new one).

The latest Stable is itself quite old. Debian does not release very
often. But security bugs are fixed when they become known. I have not
found any bug report concerning XSS in the Debian bugs database. Please
be so kind and file bugs if you are running Debian. If not, please mail
the Debian Security Team as described in
  http://www.de.debian.org/security/faq#contact

Thank you,
Lupe Christoph
--
| lupelupe-christoph.de | http://www.lupe-christoph.de/ |
| "... putting a mail server on the Internet without filtering is like |
| covering yourself with barbecue sauce and breaking into the Charity |
| Home for Badgers with Rabies. Michael Lucas |

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]