Vulnerability Bulletins

DSA-3852 squirrelmail - security update

   
Affected software Debian
 
Dawid Golunski and Filippo Cavallarin discovered that squirrelmail, awebmail application, incorrectly handled a user-supplied value. Thiswould allow a logged-in user to run arbitrary commands on the server.

More info:

https://www.debian.org/security/2017/dsa-3852