| Description: | Description:
The remote host is missing an update to squirrelmail
announced via advisory FEDORA-2006-133.
Upgrade to version upstream 1.4.6 which solves these issues
in addition to several bugs.
http://www.squirrelmail.org/changelog.php
More details here.
Additionally Fedora's package contains fixes that may
improve usability of squirrelmail in various non-English
languages. Please report to Bug #162852 if this update
causes any regressions in non-English language behavior.
* Wed Mar 1 2006 David Woodhouse 1.4.6-1
- Upgrade to 1.4.6 proper for CVE-2006-0377 CVE-2006-0195 CVE-2006-0188
- Script the charset changes instead of using a patch
- Convert the ko_KR files to UTF-8, dropping invalid characters from
what's theoretically supposed to be EUC-KR in the original.
* Tue Jan 17 2006 Warren Togami 1.4.6-0.cvs20050812.3
- do not remove mo files
- require php-mbstring
* Fri Dec 9 2005 Jesse Keating
- rebuilt
* Mon Sep 12 2005 David Woodhouse 1.4.6-0.cvs20050812.2
- Convert all locales to UTF-8 instead of legacy character sets to
work around bug #162852. Except for ko_KR, because iconv doesn't
believe its help files are actually in EUC-KR as claimed.
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2006-133
Risk factor : Medium
CVSS Score:
5.0
|
