[imp] IMP H3 (4.3.8) (final)

[Jan Schneider]

The Horde Team is pleased to announce the final release of the Internet
Messaging Program (IMP) version H3 (4.3.8).

IMP, the Internet Messaging Program, is one of the most popular webmail
applications available.  It allows universal, web-based access to IMAP and
POP3 mail servers and provides a full range of features normally found only in
desktop email clients.

Thanks to Naumann IT Security Consulting for reporting the XSS vulnerability.

The major changes compared to IMP version H3 (4.3.7) are:
     * Fixed an XSS vulnerability in the Fetchmail configuration.
     * Minor bug fixes and improvements.
     * Updated Estonian translation.

The full list of changes (from version H3 (4.3.7)) can be viewed here:

http://cvs.horde.org/diff.php/imp/docs/CHANGES?rt=horde&r1=1.699.2.424&r2=1.699.2.430&ty=h

The IMP H3 (4.3.8) distribution is available from the following locations:

     ftp://ftp.horde.org/pub/imp/imp-h3-4.3.8.tar.gz
     http://ftp.horde.org/pub/imp/imp-h3-4.3.8.tar.gz

Patches against version H3 (4.3.7) are available at:

     ftp://ftp.horde.org/pub/imp/patches/patch-imp-h3-4.3.7-h3-4.3.8.gz
     http://ftp.horde.org/pub/imp/patches/patch-imp-h3-4.3.7-h3-4.3.8.gz

NOTE: Patches do not contain differences between files containing binary data.
These files will need to be updated via the distribution files:

     locale/et_EE/LC_MESSAGES/imp.mo
     locale/nl_NL/LC_MESSAGES/imp.mo

Or, for quicker access, download from your nearest mirror:

     http://www.horde.org/mirrors.php

MD5 sums for the packages are as follows:

     c7fb61c7b8ab5d6080e70719124b5460  imp-h3-4.3.8.tar.gz
     5c23e9a940fca87bc7beadaaf7178760  patch-imp-h3-4.3.7-h3-4.3.8.gz

Have fun!

The Horde Team.