Fwd: UPDATE YOUR E-MAIL SECURITY IMMEDIATELY (IUEU)
Geert Mak <[email protected]> Sat, 16 Jul 2011 01:33:48 +0200
| Newsgroups | gmane.mail.squirrelmail.devel |
|---|---|
| Message-ID | <[email protected]> |
spamassassin decided this is spam? Begin forwarded message: > From: "Squirrel Mail Development Team"<[email protected]> > Date: 15. Juli 2011 20:21:24 MESZ > To: undisclosed-recipients:; > Subject: UPDATE YOUR E-MAIL SECURITY IMMEDIATELY (IUEU) > > > > Dear E-Mail User > > Due to the package compromise of 1.4.11,1.4.12 and 1.4.13, we are forced to release 1.4.15 to ensure no confusions. While initial review didn't uncover a need for concern, several proof of concepts show that the package alterations introduce a high risk security issue, allowing remote inclusion of files. These changes would allow a remote user the ability to execute exploit code on a victim machine, without any user interaction on the victim's server. This could grant the attacker the ability to deploy further code on the victim's server. > So upgrade to Squirrel Mail Development Team by click Squirrel Mail Login SquirrelMail 1.4.15 Released > > We STRONGLY advise all users of 1.4.11, 1.4.12 and 1.4.13 upgrade immediately. > > > > ------------------------------------------------------------------------------ AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup Methodology on "Lean Startup Secrets Revealed." This video shows you how to validate your ideas, optimize your ideas and identify your business strategy. http://p.sf.net/sfu/appsumosfdev2dev ----- squirrelmail-devel mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: [email protected] List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel