Module Name:	pkgsrc
Committed By:	martti
Date:		Fri Dec 14 20:44:35 UTC 2007

Modified Files:
	pkgsrc/mail/squirrelmail: Makefile PLIST distinfo

Log Message:
Updated mail/squirrelmail to 1.4.13

(pkgsrc notice: we were using the original, known-to-be-good 1.4.12
distfile so all your servers should be fine)

Due to the package compromise of 1.4.11, and 1.4.12, we are forced to
release 1.4.13 to ensure no confusions. While initial review didn't
uncover a need for concern, several proof of concepts show that the
package alterations introduce a high risk security issue, allowing
remote inclusion of files. These changes would allow a remote user the
ability to execute exploit code on a victim machine, without any user
interaction on the victim's server. This could grant the attacker the
ability to deploy further code on the victim's server.

We *STRONGLY* advise all users of 1.4.11, and 1.4.12 upgrade
immediately.


To generate a diff of this commit:
cvs rdiff -r1.95 -r1.96 pkgsrc/mail/squirrelmail/Makefile
cvs rdiff -r1.24 -r1.25 pkgsrc/mail/squirrelmail/PLIST
cvs rdiff -r1.44 -r1.45 pkgsrc/mail/squirrelmail/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.