Ref: http://seclists.org/oss-sec/2017/q2/135 ============================================ In case anyone needs the patched release, it looks like the patch got included at last in version: squirrelmail-20170427_0200-SVN ============================================