Format: 1.7 Date: Fri, 13 Feb 2009 06:10:32 +0100 Source: squirrelmail Binary: squirrelmail Architecture: all Version: 2:1.4.10a-2ubuntu0.1 Distribution: gutsy Urgency: low Maintainer: Ubuntu/i386 Build Daemon Changed-By: Andreas Wenning Description: squirrelmail - Webmail for nuts Changes: squirrelmail (2:1.4.10a-2ubuntu0.1) gutsy-security; urgency=low . * SECURITY UPDATE: cross site scripting issue in the HTML filter. Patch taken from upstream release. (CVE-2008-2379) * SECURITY UPDATE: Cookies sent over HTTPS will now be confined to HTTPS only (cookie secure flag) and more support for the HTTPOnly cookie attribute. Patch taken from upstream release. (CVE-2008-3663) Files: 6e91e937f1a2e06a2686115c5a1daec0 594794 web optional squirrelmail_1.4.10a-2ubuntu0.1_all.deb