On Tuesday, July 22, 2025 1:05:44 AM Mountain Standard Time Salvatore Bonaccorso wrote: > - you can try to reach out to courier upstream to get a public answer > referenceable on the fix for CVE-2004-2313 which we can use as > proof.
That is reasonable. I have a fairly good working relationship with upstream. I have opened the following issue requesting verification that neither of these CVEs affect the current version of SqWebMail: https://github.com/svarshavchik/courier/issues/61 -- Soren Stoutner so...@debian.org
signature.asc
Description: This is a digitally signed message part.