1 message in net.sourceforge.lists.courier-users[courier-users] SqWebMail 20050826
FromSent OnAttachments
Sam VarshavchikAug 26, 2005 5:08 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] SqWebMail 20050826Actions...
From:Sam Varshavchik (mrs@courier-mta.com)
Date:Aug 26, 2005 5:08:33 pm
List:net.sourceforge.lists.courier-users

Download: http://www.courier-mta.org/download.php

New builds of sqwebmail and courier packages that contain a webmail fix for a potential cross-site scripting exploit in some browsers, that depends on the browser's parsing of syntactically invalid HTML.

Alternatively, the following patch can be applied to older versions of either the courier, or the sqwebmail package, if a wholesale upgrade is not feasible: http://www.courier-mta.org/beta/patches/sqwebmail-xsite-fix/