[pkg-horde] Bug#417524: imp4 4.1.4 contains securityfixes

hylke at tweakers.net hylke at tweakers.net
Mon Apr 2 22:48:41 UTC 2007


Package: imp4
Version: 4.1.3-4
Severity: grave
Tags: security
Justification: user security hole

http://lists.horde.org/archives/announce/2007/000316.html mentions a new version of horde, most important are:
    * Fixed XSS vulnerabilities in the search screen and thread view.

I would like to see a fixed version of imp4 :P

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.20.1
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages imp4 depends on:
ii  horde3                   3.1.3-4         horde web application framework
ii  php-mail-mime            1.3.1-1.1       PHP PEAR module for creating and d
ii  php4-imap                6:4.4.4-8+etch1 IMAP module for php4
ii  php5-imap                5.2.0-8+etch1   IMAP module for php5

Versions of packages imp4 recommends:
ii  locales                     2.3.6.ds1-13 GNU C Library: National Language (

-- no debconf information




More information about the pkg-horde-hackers mailing list