[Pkg-roundcube-maintainers] Bug#508628: etch-backports still vulnerable

[Kalev Kadak]

Holger Levsen wrote:
> Hi,
>
> On Dienstag, 13. Januar 2009, Kingsley Masters wrote:
>   
>> I'd like to comfirm this bug still exists on etch-backports and is being
>> actively exploited.  Our Debian server running roundcube was comprimised
>> yesterday though this bug.
>>     
>
> Kingsley, out of curiosity, do you have suhosin installed?
>
> to the roundcube maintainers: do you plan an upload to bpo? I have a backport 
> ready (well, needs testing, but I'm about to do this) which I could upload...
>
>
> regards,
> 	Holger
>   

Hi,

not Kingsley, but in my case suhosin was not installed.

Regards,
Kalev Kadak