> I just ran a Mac OS X Security Update for Mac OS X 10.3.9 on two boxes > running SquirrelMail, and both of them are now 'broken'. I can login to > SquirrelMail fine, and do anything but read a message. If I try to read > a message, I get a fatal 30 second timeout message. > > The update was Security Update 2006-001: > > > http://docs.info.apple.com/article.html?artnum=303382 > > > Which includes amongst other things: > > > ---------------------------------------------- > apache_mod_php > > CVE-ID: CVE-2005-3319, CVE-2005-3353, CVE-2005-3391, CVE-2005-3392 > > > Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X > v10.4.5, Mac OS X Server v10.4.5 > > Impact: Multiple security issues in PHP 4.4 > > > Description: PHP 4.4.1 fixes several security issues in the Apache > module and scripting environment. Details of the fixes are available via > the PHP web site (www.php.net). PHP ships with Mac OS X but is disabled by > default. ---------------------------------------------- > > > Any thoughts?
Contact apple and ask to upgrade or fix php 4.4.1. This php version is broken. Apple released update on February 28, 2006, but PHP 4.4.1 issues were known for more than two months. PHP 4.4.2 was released on 2006-01-13. SquirrelMail is affected by http://bugs.php.net/35067 and http://bugs.php.net/33720. There is a patch posted on http://sourceforge.net/tracker/index.php?func=detail&aid=1420308&group_id=311&atid=300311 Patch does not fix mb_encode_mimeheader issues and we are not the ones that broke thing. SquirrelMail uses next and prev functions according to PHP manual. ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@lists.sourceforge.net List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users