Re: [MLUG] MLUG admins: Squirrelmail server.

["Mark Rages" <EMAIL:PROTECTED>]

On 1/16/07, Jerry Gamblin <EMAIL:PROTECTED> wrote:
> On 1/16/07, Mark Rages <EMAIL:PROTECTED> wrote:
> > I annoyed somebody on another list and he made [what could be
> > interpreted as] a vague threat about the Squirrelmail installation on
> > MLUG.
> >
> > Here's the post:
> > http://article.gmane.org/gmane.comp.hardware.microcontrollers.pic/107371
>
> 1.4.6 does have known issues:
>
> http://www.securityfocus.com/bid/21414
>
> We should be on 1.4.9, but I don't even know who is in charge of
> updating server.
> On the other hand making threats against an educational server isnt very smart.

Doesn't Debian backport security patches?  So just going by version
numbers won't tell if the vulnerability is there.  I ran into this at
my last job, when a security consultant made a scary report about
vulnerable software, by just checking version numbers.

Regards,
Mark
EMAIL:PROTECTED
--
You think that it is a secret, but it never has been one.
 - fortune cookie

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members