Lucene search

K
oraclelinuxOracleELSA-2009-0010
HistoryJan 12, 2009 - 12:00 a.m.

squirrelmail security update

2009-01-1200:00:00
Oracle
linux.oracle.com
13

0.005 Low

EPSS

Percentile

72.6%

[1.4.8-5.0.1.el5_2.2]

  • Remove Redhat splash screen images
    [1.4.8-5.2]
  • Resolves: CVE-2008-2379
  • fix XSS issue caused by an insufficient html mail sanitation
    [1.4.8-5.1]
  • don’t transmit cookies under non-SSL connections if the session
    is started under an SSL (https) connection
  • Resolves: CVE-2008-3663, #468398
  • fix release number with respect to Z-stream nvr policy