Re: [SM-USERS] ANNOUNCE: SquirrelMail 1.4.13 Released

[<ri...@ra...>]

Am Freitag, 14. Dezember 2007 18:22 schrieb Jon Angliss:

> Due to the package compromise of 1.4.11, and 1.4.12, we are forced to
> release 1.4.13 to ensure no confusions.

When and in which way was 1.4.11 compromised? This came to me as a 
surprise since all the other posts only mentioned 1.4.12?!

My 1.4.11 setup doesn't have the known HTTP_BASE_PATH manipulation, but 
I took it offline nonetheless. Problem is, however, that 1.4.13 doesn't 
work for me (see other post), so for the moment the users who rely on 
webmail here don't have access to their mail.

Can I take my 1.4.11 setup online again or are there other security 
issues?