About Ubuntu

=========================================================== Ubuntu Security Notice USN-201-1 October 11, 2005 courier vulnerabilities CAN-2005-2724, CAN-2005-2769, CAN-2005-2820 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) The following packages are affected: sqwebmail The problem can be corrected by upgrading the affected package to version 0.45.6-1ubuntu0.1 (for Ubuntu 4.10), or 0.47-3ubuntu1.3 (for Ubuntu 5.04). In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Several Cross Site Scripting vulnerabilities were discovered in SqWebmail. A remote attacker could exploit this to execute arbitrary JavaScript or other active HTML embeddable content in the web browser of an SqWebmail user by sending specially crafted emails to him. Please note that the "sqwebmail" package is not officially supported by Ubuntu (it is in the "universe" section of the archive).