ANNOUNCE: SquirrelMail 1.4.10a ReleasedMay 09, 2007 by Thijs Kinkhorst
The SquirrelMail Project Team is proud to announce the release of SquirrelMail 1.4.10a.
The 1.4.10 release contains multiple fixes for cross site scripting issues triggered by viewing HTML mail. Besides that it contains bug fixes and stability enhancements.
Download here. There are separate patches available for only the security issues against various previous versions.
Happy SquirrelMailing!
NOTE: 1.4.10a was released to fix a regression in the compose form, shortly after the 1.4.10 release.New team membersApr 20, 2007 by Fredrik Jervfors
The SquirrelMail Project Team has four new developers who have joined us by way of Google's Summer of Code program. During the next couple of months, they will complete some subprojects, and after that we hope that they will be sticking around for good.The four new members are (in no particular order): Antoine Delignat-Lavaud (France), Zach Segal (USA), Ramesh Kumar Tippabhotla (India), and D. Keith Casey Jr. (USA).A longer presentation can be found in the mailing archives.We switched from CVS to SubversionJan 15, 2007 by Thijs Kinkhorst
The SquirrelMail source code is now maintained using Subversion (SVN) instead of CVS. If you were using a CVS copy, see the download page for new checkout instructions. Questions arising from the switch can be sent to the squirrelmail-devel list.ANNOUNCE: SquirrelMail 1.4.9a ReleasedDec 04, 2006 by Marc Groot Koerkamp
The SquirrelMail Project Team is proud to announce the release of SquirrelMail 1.4.9a.
The day after we released SquirrelMail 1.4.9 new cross site scripting issues were reported and immediately fixed. Therefor the decision to release 1.4.9a so short after the 1.4.9 release.
The 1.4.9a release contains multiple fixes for cross site scripting issues triggered by viewing html mail with Internet Explorer upto version 5.
The 1.4.9 release contains a fix for cross site scripting issues, a workaround for an issue in Internet Explorer and a collection of regular bugfixes. Details on all the changes in this release can be found in the ChangeLog and under the security section of our website.
Download here. There are separate patches available against 1.4.8 and against 1.5.x CVS HEAD. If you already applied the patches accompanying the 1.4.9 release, you only need the mime2.patch file, otherwise you need all files.
Happy SquirrelMailing!ANNOUNCE: SquirrelMail 1.4.9 ReleasedDec 02, 2006 by Thijs Kinkhorst
The SquirrelMail Project Team is proud to announce the release of SquirrelMail 1.4.9.
This release contains a fix for cross site scripting issues, a workaround for an issue in Internet Explorer and a collection of regular bugfixes. Details on all the changes in this release can be found in the ChangeLog and under the security section of our website.
Download here. The security patches are also separately available. Happy SquirrelMailing!ANNOUNCE: SquirrelMail 1.4.8 ReleasedAug 11, 2006 by Thijs Kinkhorst
The SquirrelMail Project Team is proud to announce the release of SquirrelMail 1.4.8.
This release contains an important security fix where a logged-in user could overwrite variables, and a collection of regular bugfixes. Details on all the changes in this release can be found in the ChangeLog.
There's also two patches available against the 1.4.7 release for just the security issue: a minimal one that removes the function, because it was broken anyway, or more extended one which fixes the functionality and closes the hole.
To grab your copy of the latest version, go to the Download page. Happy SquirrelMailing!
