Mailing List Archive

On Thu, 2006-03-09 at 00:03 +0100, Timo Veith wrote:
> Hi list readers,
>
> I wonder when version 1.4.6 of squirrelmail is becoming stable, it was
> released on 23 February 2006. I wouldn't ask if there wouldn't be a
> security related bug fix within that new version. Where is the fast
> security team of gentoo? :)

Did you file a bug for this problem? Did you search for open bugs?
Ours/Your/The security team always moves much faster when we are made
aware of problems using https://bugs.gentoo.org when it's assigned to
security@g.o

So if you have not filed a bug then you are encouraged to do so now
detailing the problem and the fix.

--
Ned Ludd <solar@gentoo.org>
Gentoo Linux

--
gentoo-security@gentoo.org mailing list

On 09.03.2006 00:03 Timo Veith wrote:
> I wonder when version 1.4.6 of squirrelmail is becoming stable, it was
> released on 23 February 2006. I wouldn't ask if there wouldn't be a
> security related bug fix within that new version. Where is the fast
> security team of gentoo? :)
>
> Is there anyone who is using the keyworded version? And if yes were
> there any problem while upgrading?

No problems running or upgrading from 1.4.5-r1.

Cheers,
Tobias

--
GPG-Key: 0xEF37FF28 (1024/4096 - DSA/ELG-E)
Fingerprint: 3C4B 155F 2621 CEAF D3A6 0CCB 937C 9597 EF37 FF28

Am Donnerstag 09 März 2006 01:33 schrieb Ned Ludd:
> On Thu, 2006-03-09 at 00:03 +0100, Timo Veith wrote:
> > Hi list readers,
> >
> > I wonder when version 1.4.6 of squirrelmail is becoming stable, it
> > was released on 23 February 2006. I wouldn't ask if there wouldn't be
> > a security related bug fix within that new version. Where is the fast
> > security team of gentoo? :)
>
> Did you file a bug for this problem? Did you search for open bugs?
> Ours/Your/The security team always moves much faster when we are made
> aware of problems using https://bugs.gentoo.org when it's assigned to
> security@g.o
>
> So if you have not filed a bug then you are encouraged to do so now
> detailing the problem and the fix.
>
> --
> Ned Ludd <solar@gentoo.org>
> Gentoo Linux

There ist a bug listed at bugs.gentoo.org that refers to this.

http://bugs.gentoo.org/show_bug.cgi?id=123781

I hope, they will react soon.

--
Timo

--
gentoo-security@gentoo.org mailing list

Am Donnerstag 09 März 2006 08:55 schrieb Tobias Sager:
> On 09.03.2006 00:03 Timo Veith wrote:
> > I wonder when version 1.4.6 of squirrelmail is becoming stable, it
> > was released on 23 February 2006. I wouldn't ask if there wouldn't be
> > a security related bug fix within that new version. Where is the fast
> > security team of gentoo? :)
> >
> > Is there anyone who is using the keyworded version? And if yes were
> > there any problem while upgrading?
>
> No problems running or upgrading from 1.4.5-r1.
>
> Cheers,
> Tobias

I am still running 1.4.5, as I am always a little afraid of upgrading such
productiv stuff and if there is no security reason.

--
Timo

--
gentoo-security@gentoo.org mailing list

Timo Veith wrote:

> Where is the fast
> security team of gentoo? :)

Like the status whiteboard on the bug says, it's waiting on arch teams
to mark stable. We rely on other teams to due their part of the work in
time, which is becoming more and more difficult.

https://bugs.gentoo.org/show_bug.cgi?id=123781

--
Thierry Carrez (Koon)
Gentoo Linux Security
--
gentoo-security@gentoo.org mailing list

Hi all,

GLSA 200603-09 has been sent to resolve this
issue:
http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml

Please give it some time to get spread to the mirrors.

Thank you and kind regards,
Stefan
--
gentoo-security@gentoo.org mailing list