[Bug 275950] [NEW] Please sync squirrelmail 2:1.4.15-3 (universe) from Debian unstable (main).

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Michael Bienia (geser):

Binary package hint: squirrelmail

Please sync squirrelmail 2:1.4.15-3 (universe) from Debian unstable
(main).

Changelog since current intrepid version 2:1.4.15-1:

squirrelmail (2:1.4.15-3) unstable; urgency=high

  * Cookies sent over HTTPS will now be confined to HTTPS only
    (cookie secure flag) and more support for the HTTPOnly cookie
    attribute. Patch taken from upstream release.
    (CVE-2008-3663, closes: #499942)

 -- Thijs Kinkhorst <thijs at debian.org>  Sun, 28 Sep 2008 16:33:48 +0200

squirrelmail (2:1.4.15-2) unstable; urgency=low

  * Update fortune location to Debian's default, thanks
    Richard Nelson, closes: #484835.
  * Conforms to Debian policy 3.8.0, no changes required.

 -- Thijs Kinkhorst <thijs at debian.org>  Sun, 13 Jul 2008 15:31:17 +0200

** Affects: squirrelmail (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

-- 
Please sync squirrelmail 2:1.4.15-3 (universe) from Debian unstable (main).
https://bugs.edge.launchpad.net/bugs/275950
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is a direct subscriber.