-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 22 Jan 2005 23:33:16 +0100 Source: squirrelmail Binary: squirrelmail Architecture: source all Version: 2:1.4.4-1 Distribution: unstable Urgency: high Maintainer: Jeroen van Wolffelaar <jeroen@wolffelaar.nl> Changed-By: Jeroen van Wolffelaar <jeroen@wolffelaar.nl> Description: squirrelmail - Webmail for nuts Closes: 270626 275941 282829 286374 289088 Changes: squirrelmail (2:1.4.4-1) unstable; urgency=high . * New upstream version: 1.4.4 + Security: Added hook for Preferences Backend to resolve potential local file inclusion resulting in arbitrary code execution, warranting high urgency [CAN-2005-0075] + Security: Fix potential file inclusion issues in src/webmail.php. [CAN-2005-0103] + Security: Fix possible XSS issues in src/webmail.php. [CAN-2005-0104] * Thijs Kinkhorst: Add missing docs to squirrelmail.docs file (Closes: #289088) . Thanks a lot to Thijs Kinkhorst who worked hard to get 1.4.4 released, and helped tremendously with the packaging for Debian . squirrelmail (2:1.4.3a+1.4.4rc1-0exp1) experimental; urgency=low . * Experimental package * New upstream version: 1.4.4 Release Candidate 1 + Fixes broken theme selectbox (Closes: #286374) + Fixes wrong German translation (Closes: #282829) + Fixes broken unicode encoding (Closes: #270626) + Fixes signout error when timed out (Closes: #275941) + Removed several backported patches that are in 1.4.4 now * Locales are not in the squirrelmail package anymore, but a separate package, start to recommend it (squirrelmail-locales) Files: ba53d6a094f7f752e19484b89017cb25 742 web optional squirrelmail_1.4.4-1.dsc f50548b6f4f24d28afb5e6048977f4da 575871 web optional squirrelmail_1.4.4.orig.tar.gz 24082ab29032795b2c4bd41da87e8b07 13466 web optional squirrelmail_1.4.4-1.diff.gz e2f91f6748d4b4e5e0182ce67adbb1f6 566176 web optional squirrelmail_1.4.4-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Signed by Jeroen van Wolffelaar <jeroen@wolffelaar.nl> iD8DBQFB8ujvl2uISwgTVp8RAsp7AJ93ATOoF2150m9SfcjN4XNElzNj7wCfWuAy aWeeV+NftaqiDuOr1FKd6oI= =4hua -----END PGP SIGNATURE----- Accepted: squirrelmail_1.4.4-1.diff.gz to pool/main/s/squirrelmail/squirrelmail_1.4.4-1.diff.gz squirrelmail_1.4.4-1.dsc to pool/main/s/squirrelmail/squirrelmail_1.4.4-1.dsc squirrelmail_1.4.4-1_all.deb to pool/main/s/squirrelmail/squirrelmail_1.4.4-1_all.deb squirrelmail_1.4.4.orig.tar.gz to pool/main/s/squirrelmail/squirrelmail_1.4.4.orig.tar.gz -- To UNSUBSCRIBE, email to debian-devel-changes-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org