[horde] Opinion on a reported bug report.

[ANANT S ATHAVALE]

----- Message from ANANT S ATHAVALE <asa at ursc.gov.in> ---------
    Date: Thu, 24 Feb 2022 10:23:24 +0530
    From: ANANT S ATHAVALE <asa at ursc.gov.in>
Subject: [horde] Opinion on a reported bug report.
      To: horde at lists.horde.org


> Hi all,
>
> We came across a link which indicates that there is a security  
> bug/vulnerability with Horde.  It discusses about security  
> vulnerability in the feature that takes OpenOffice documents and  
> creates previews to show inside the browser window.
>
> https://therecord.media/unpatched-bug-allows-takeover-of-horde-webmail-accounts-servers/amp/
>
> I have serious doubts over this.  I have never observed that,  
> security bugs (if any), are not addressed by Horde Team.
>
> Sorry, if this query was already posted earlier.
>
> -- 
>      सादर धन्यवाद/ Thanks & Regards
>           अनंत / Anant
> ------------------------------------------------------------------------------
> IMPORTANT NOTE:
>
> ISRO Satellite Centre (ISAC) was renamed as U R Rao Satellite Centre (URSC).
> Hence, the existing domain (isac.gov.in) is changed to new domain ursc.gov.in
> resulting into change of e-mail address from user at isac.gov.in to  
> user at ursc.gov.in.
> Please note this change and update your contact details for new  
> domain (ursc.gov.in).
> ------------------------------------------------------------------------------
> Confidentiality Notice: This e-mail message, including any  
> attachments, is for
> the sole use of the intended recipient(s) and may contain confidential and
> privileged information. Any unauthorized review, use, disclosure or
> distribution is prohibited. If you are not the intended recipient, please
> contact the sender by reply e-mail and destroy all copies of the original
> message.
> ------------------------------------------------------------------------------
>
> -- 
> Horde mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: horde-unsubscribe at lists.horde.org


----- End message from ANANT S ATHAVALE <asa at ursc.gov.in> -----

Sorry, this is already posted by Michael Menge.




-- 
      सादर धन्यवाद/ Thanks & Regards
           अनंत / Anant
------------------------------------------------------------------------------
IMPORTANT NOTE:

ISRO Satellite Centre (ISAC) was renamed as U R Rao Satellite Centre (URSC).
Hence, the existing domain (isac.gov.in) is changed to new domain ursc.gov.in
resulting into change of e-mail address from user at isac.gov.in to  
user at ursc.gov.in.
Please note this change and update your contact details for new domain  
(ursc.gov.in).
------------------------------------------------------------------------------
Confidentiality Notice: This e-mail message, including any attachments, is for
the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.
------------------------------------------------------------------------------