Debian Security Advisory
DLA-1484-1 squirrelmail -- LTS security update
- Date Reported:
- 30 Aug 2018
- Affected Packages:
- Security database references:
- In Mitre's CVE dictionary: CVE-2018-14950, CVE-2018-14951, CVE-2018-14952, CVE-2018-14953, CVE-2018-14954, CVE-2018-14955.
- More information:
It was discovered that there were a number of Cross Site Scripting (XSS) vulnerabilities in the squirrelmail webmail client.
For Debian 8
Jessie, these issues has been fixed in squirrelmail version 2:1.4.23~svn20120406-2+deb8u3.
We recommend that you upgrade your squirrelmail packages.