Debian Security Advisory

DLA-1484-1 squirrelmail -- LTS security update

Date Reported:
30 Aug 2018
Affected Packages:
squirrelmail
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2018-14950, CVE-2018-14951, CVE-2018-14952, CVE-2018-14953, CVE-2018-14954, CVE-2018-14955.
More information:

It was discovered that there were a number of Cross Site Scripting (XSS) vulnerabilities in the squirrelmail webmail client.

For Debian 8 Jessie, these issues has been fixed in squirrelmail version 2:1.4.23~svn20120406-2+deb8u3.

We recommend that you upgrade your squirrelmail packages.