thanks for squirrelmail, I'm using it now for many years and am simply
I recently looked for additional plugins, and on the way also searched for
possible upgrade necessities.
I noticed that there seems to be no dedicated place on the main web site
where all changes for past revision are listed. It is usually quite
helpful for deciding whether an upgrade is necessary, and one often finds
it useful for tracking down errors. In the case of squirrelmail with its
plugin system, also major plugin changes could be incorporated in such a
Reading about the package compromise, it seems to be a good idea to
subscribe to one announcement mailing list. Optimally, there would be a
dedicated security announcement list (unless the current announcement list
is already used that way). Maybe it would be good to place a reference to
such a developer-writable list near the download links in the download
section. It is then more likely to be used by admins, and is still not at
risk to get noisy.