Topic: Updating IMP and Horde

[charlien]

A bank that has an SME 6.01 server in server and gateway mode had a vulnerability test done that said they needed to update to IMP 3.2.4 or greater and Horder 2.2.7 or greater. I looked in the update directory on Contribs and don't see either. Are they part of a larger package? Will a yum update install it? Do they really need it? Thank you for the advice.

[wellsi]

Please, if you suspect a vulnerability in any SME Server package, address them to security@contribs.org as all emails will receive a reply from the security team. It also allows us to ensure that the issues raised are tracked until completion.

Raising the issue in the forum tends to lead to the answer being lost.