The SquirrelMail Project Team is proud to announce the release of SquirrelMail 1.4.9a.
The day after we released SquirrelMail 1.4.9 new cross site scripting issues were reported and immediately fixed. Therefor the decision to release 1.4.9a so short after the 1.4.9 release.
The 1.4.9a release contains multiple fixes for cross site scripting issues triggered by viewing html mail with Internet Explorer.
The 1.4.9 release contains a fix for cross site scripting issues, a workaround for an issue in Internet Explorer and a collection of regular bugfixes. Details on all the changes in this release can be found in the ChangeLog and under the security section of our website.
Download here. The security patches against 1.4.8 and 1.5.1 will follow a.s.a.p.