On Sunday, 2004-05-30 at 03:15:44 +0200, Roman Medina wrote: > I also noticed that latest Debian stable distro ships a very old > version of SquirrelMail, which is vulnerable to several old XSS bugs > (in addition to the new one). The latest Stable is itself quite old. Debian does not release very often. But security bugs are fixed when they become known. I have not found any bug report concerning XSS in the Debian bugs database. Please be so kind and file bugs if you are running Debian. If not, please mail the Debian Security Team as described in http://www.de.debian.org/security/faq#contact Thank you, Lupe Christoph -- | lupe@xxxxxxxxxxxxxxxxx | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without filtering is like | | covering yourself with barbecue sauce and breaking into the Charity | | Home for Badgers with Rabies. Michael Lucas |