netfx
Verified User
The day after we released SquirrelMail 1.4.9 new cross site scripting issues were reported and immediately fixed. Therefor the decision to release 1.4.9a so short after the 1.4.9 release.
The 1.4.9a release contains multiple fixes for cross site scripting issues triggered by viewing html mail with Internet Explorer upto version 5.
The 1.4.9 release contains a fix for cross site scripting issues, a workaround for an issue in Internet Explorer and a collection of regular bugfixes. Details on all the changes in this release can be found in the ChangeLog and under the security section of our website.
http://www.squirrelmail.org/changelog.php
The 1.4.9a release contains multiple fixes for cross site scripting issues triggered by viewing html mail with Internet Explorer upto version 5.
The 1.4.9 release contains a fix for cross site scripting issues, a workaround for an issue in Internet Explorer and a collection of regular bugfixes. Details on all the changes in this release can be found in the ChangeLog and under the security section of our website.
http://www.squirrelmail.org/changelog.php