> I just ran a Mac OS X Security Update for Mac OS X 10.3.9 on two boxes
> running SquirrelMail, and both of them are now 'broken'.  I can login to
> SquirrelMail fine, and do anything but read a message.  If I try to read
> a message, I get a fatal 30 second timeout message.
>
> The update was Security Update 2006-001:
>
>
> http://docs.info.apple.com/article.html?artnum=303382
>
>
> Which includes amongst other things:
>
>
> ----------------------------------------------
> apache_mod_php
>
> CVE-ID: CVE-2005-3319, CVE-2005-3353, CVE-2005-3391, CVE-2005-3392
>
>
> Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X
> v10.4.5, Mac OS X Server v10.4.5
>
> Impact: Multiple security issues in PHP 4.4
>
>
> Description: PHP 4.4.1 fixes several security issues in the Apache
> module and scripting environment. Details of the fixes are available via
> the PHP web site (www.php.net). PHP ships with Mac OS X but is disabled by
>  default. ----------------------------------------------
>
>
> Any thoughts?

Contact apple and ask to upgrade or fix php 4.4.1. This php version is
broken. Apple released update on February 28, 2006, but PHP 4.4.1 issues
were known for more than two months. PHP 4.4.2 was released on 2006-01-13.

SquirrelMail is affected by http://bugs.php.net/35067 and
http://bugs.php.net/33720. There is a patch posted on
http://sourceforge.net/tracker/index.php?func=detail&aid=1420308&group_id=311&atid=300311

Patch does not fix mb_encode_mimeheader issues and we are not the ones
that broke thing. SquirrelMail uses next and prev functions according to
PHP manual.



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@lists.sourceforge.net
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to