[imp] Re: [announce] IMP 3.2.6 (final)

Federico Petronio petrus at activesec.biz
Mon Oct 4 08:03:34 PDT 2004


Jan Schneider wrote:

> The Horde Team is pleased to announce the official release of the IMP Webmail
> Client version 3.2.6.
>  
> Changes in this release:
>     - SECURITY: Removed tags with -moz-binding: styles in the HTML MIME viewer.
>     - SECURITY: Removed scripts from <base> tags in the HTML MIME viewer.
>     - SECURITY: Removed scripts from obfuscated "on..." attributes in the HTML
>       MIME viewer.

Hello... I will be grateful if you could post a patch to fix the
security issues without updating the release. I currently run Horde
3.2.3 and IMP 3.2.3 with security patches up to 3.2.5.

Thank you!
-- 
                                         Federico Petronio
                                         petrus at activesec.biz




More information about the imp mailing list