Bug 464184 - CVE-2008-3663 Squirrelmail session hijacking [F8]
Summary: CVE-2008-3663 Squirrelmail session hijacking [F8]
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: squirrelmail
Version: 8
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Michal Hlavinka
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: CVE-2008-3663
TreeView+ depends on / blocked
 
Reported: 2008-09-26 15:46 UTC by Josh Bressers
Modified: 2008-10-25 08:08 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-10-25 08:08:04 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Josh Bressers 2008-09-26 15:46:20 UTC 
F8 tracking bug: see blocks bug list for full details of the security issue(s).



[bug automatically created by: add-tracking-bugs]
Comment 1 Josh Bressers 2008-09-26 15:46:25 UTC 
You can eventually use the following link to create the update request: 
https://admin.fedoraproject.org/updates/new/request=Stabletype=securityrelease=Fedora%208&bugs=464184
Comment 2 Michal Hlavinka 2008-10-01 14:45:00 UTC 
fixed in 1.4.16-1.fc8
Comment 3 David Juran 2008-10-24 07:38:09 UTC 
reopening since 1.4.16 was (erroneously?) pushed to "testing" instead of "stable"
Comment 4 Fedora Update System 2008-10-24 23:48:13 UTC 
squirrelmail-1.4.16-1.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 6 Michal Hlavinka 2008-10-25 08:08:04 UTC 
squirrelmail-1.4.16-1.fc8 has been moved from testing to stable. closing again
Note You need to log in before you can comment on or make changes to this bug.