[SECURITY] Fedora Core 6 Update: squirrelmail-1.4.8-3.fc6

[Warren Togami]

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-089
2007-01-17
---------------------------------------------------------------------

Product     : Fedora Core 6
Name        : squirrelmail
Version     : 1.4.8
Release     : 3.fc6
Summary     : SquirrelMail webmail client
Description :
SquirrelMail is a standards-based webmail package written in PHP4. It
includes built-in pure PHP support for the IMAP and SMTP protocols, and
all pages render in pure HTML 4.0 (with no Javascript) for maximum
compatibility across browsers.  It has very few requirements and is very
easy to configure and install. SquirrelMail has all the functionality
you would want from an email client, including strong MIME support,
address books, and folder manipulation.

---------------------------------------------------------------------
Update Information:

http://squirrelmail.org/security/issue/2006-12-02
CVE-2006-6142
Cross site scripting in compose, draft & HTML mail viewing
http://squirrelmail.org/security/issue/2006-12-03
Workaround for Internet Explorer MIME handling


---------------------------------------------------------------------
* Mon Jan 15 2007 Warren Togami <wtogami at redhat.com> 1.4.8-3
- CVE-2006-6142

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

f975f66a9938e3721a9d24540032c0bfad7c1c9c  SRPMS/squirrelmail-1.4.8-3.fc6.src.rpm
f975f66a9938e3721a9d24540032c0bfad7c1c9c  noarch/squirrelmail-1.4.8-3.fc6.src.rpm
33920da1f74740222e84adc0d1ff9c72e9cf300a  ppc/squirrelmail-1.4.8-3.fc6.noarch.rpm
33920da1f74740222e84adc0d1ff9c72e9cf300a  x86_64/squirrelmail-1.4.8-3.fc6.noarch.rpm
33920da1f74740222e84adc0d1ff9c72e9cf300a  i386/squirrelmail-1.4.8-3.fc6.noarch.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------