Your message dated Mon, 08 Oct 2007 14:02:14 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#444351: fixed in egroupware 1.2.107-2.dfsg-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: egroupware
Severity: grave
Tags: security
Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for egroupware.
CVE-2007-5091[0]:
| Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare
| 1.4.001 allow remote attackers to inject arbitrary web script or HTML
| via the cat_data[color] parameter to (1)
| preferences/inc/class.uicategories.inc.php and (2)
| admin/inc/class.uicategories.inc.php.
If you fix this vulnerability please also include the CVE id
in your changelog entry.
For further information:
[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5091
Kind regards
Nico
--
Nico Golde - http://ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
pgp1oTRHhioqx.pgp
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: egroupware
Source-Version: 1.2.107-2.dfsg-2
We believe that the bug you reported is fixed in the latest version of
egroupware, which is due to be installed in the Debian FTP archive:
egroupware-addressbook_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-addressbook_1.2.107-2.dfsg-2_all.deb
egroupware-bookmarks_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-bookmarks_1.2.107-2.dfsg-2_all.deb
egroupware-calendar_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-calendar_1.2.107-2.dfsg-2_all.deb
egroupware-core_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-core_1.2.107-2.dfsg-2_all.deb
egroupware-developer-tools_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-developer-tools_1.2.107-2.dfsg-2_all.deb
egroupware-emailadmin_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-emailadmin_1.2.107-2.dfsg-2_all.deb
egroupware-etemplate_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-etemplate_1.2.107-2.dfsg-2_all.deb
egroupware-felamimail_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-felamimail_1.2.107-2.dfsg-2_all.deb
egroupware-filemanager_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-filemanager_1.2.107-2.dfsg-2_all.deb
egroupware-infolog_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-infolog_1.2.107-2.dfsg-2_all.deb
egroupware-ldap_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-ldap_1.2.107-2.dfsg-2_all.deb
egroupware-manual_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-manual_1.2.107-2.dfsg-2_all.deb
egroupware-mydms_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-mydms_1.2.107-2.dfsg-2_all.deb
egroupware-news-admin_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-news-admin_1.2.107-2.dfsg-2_all.deb
egroupware-phpbrain_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-phpbrain_1.2.107-2.dfsg-2_all.deb
egroupware-phpsysinfo_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-phpsysinfo_1.2.107-2.dfsg-2_all.deb
egroupware-polls_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-polls_1.2.107-2.dfsg-2_all.deb
egroupware-projectmanager_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-projectmanager_1.2.107-2.dfsg-2_all.deb
egroupware-registration_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-registration_1.2.107-2.dfsg-2_all.deb
egroupware-resources_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-resources_1.2.107-2.dfsg-2_all.deb
egroupware-sambaadmin_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-sambaadmin_1.2.107-2.dfsg-2_all.deb
egroupware-sitemgr_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-sitemgr_1.2.107-2.dfsg-2_all.deb
egroupware-timesheet_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-timesheet_1.2.107-2.dfsg-2_all.deb
egroupware-wiki_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-wiki_1.2.107-2.dfsg-2_all.deb
egroupware-workflow_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware-workflow_1.2.107-2.dfsg-2_all.deb
egroupware_1.2.107-2.dfsg-2.diff.gz
to pool/main/e/egroupware/egroupware_1.2.107-2.dfsg-2.diff.gz
egroupware_1.2.107-2.dfsg-2.dsc
to pool/main/e/egroupware/egroupware_1.2.107-2.dfsg-2.dsc
egroupware_1.2.107-2.dfsg-2_all.deb
to pool/main/e/egroupware/egroupware_1.2.107-2.dfsg-2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Eisentraut <[EMAIL PROTECTED]> (supplier of updated egroupware package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 08 Oct 2007 15:28:48 +0200
Source: egroupware
Binary: egroupware-news-admin egroupware-felamimail egroupware-polls
egroupware-calendar egroupware egroupware-bookmarks egroupware-wiki
egroupware-sambaadmin egroupware-filemanager egroupware-ldap
egroupware-addressbook egroupware-mydms egroupware-etemplate
egroupware-registration egroupware-emailadmin egroupware-timesheet
egroupware-developer-tools egroupware-phpsysinfo egroupware-resources
egroupware-core egroupware-infolog egroupware-manual egroupware-projectmanager
egroupware-workflow egroupware-sitemgr egroupware-phpbrain
Architecture: source all
Version: 1.2.107-2.dfsg-2
Distribution: unstable
Urgency: high
Maintainer: Peter Eisentraut <[EMAIL PROTECTED]>
Changed-By: Peter Eisentraut <[EMAIL PROTECTED]>
Description:
egroupware - web-based groupware suite
egroupware-addressbook - eGroupWare addressbook management application
egroupware-bookmarks - eGroupWare bookmark management application
egroupware-calendar - eGroupWare calendar management application
egroupware-core - eGroupWare core modules
egroupware-developer-tools - eGroupWare developer tools
egroupware-emailadmin - eGroupWare E-mail user administration application
egroupware-etemplate - widget-based template system for eGroupWare
egroupware-felamimail - eGroupWare FeLaMiMail application
egroupware-filemanager - eGroupWare file manager application
egroupware-infolog - eGroupWare infolog application
egroupware-ldap - eGroupware LDAP support files
egroupware-manual - eGroupWare manual
egroupware-mydms - eGroupWare document management system
egroupware-news-admin - eGroupWare news administration interface
egroupware-phpbrain - eGroupWare phpbrain application
egroupware-phpsysinfo - eGroupWare phpSysInfo application
egroupware-polls - eGroupWare polling application
egroupware-projectmanager - eGroupWare projects management application
egroupware-registration - eGroupWare registration application
egroupware-resources - eGroupWare resource manager application
egroupware-sambaadmin - eGroupWare Samba administration application
egroupware-sitemgr - eGroupWare site manager application
egroupware-timesheet - eGroupWare timesheet application
egroupware-wiki - eGroupWare wiki application
egroupware-workflow - eGroupWare workflow application
Closes: 444351
Changes:
egroupware (1.2.107-2.dfsg-2) unstable; urgency=high
.
* Fixed cross-site-scripting security problem (patch by Nico Golde)
(CVE-2007-5091) (closes: #444351)
Files:
040a09663bbcf7787640f27378988589 1188 web optional
egroupware_1.2.107-2.dfsg-2.dsc
a32deea9c84d52c349faf85ce47220f3 32137 web optional
egroupware_1.2.107-2.dfsg-2.diff.gz
a89a8de625e637de2d482e47c42f4417 6548 web optional
egroupware_1.2.107-2.dfsg-2_all.deb
6943ac1430b3cadb1b63dd183068bde6 4990024 web optional
egroupware-core_1.2.107-2.dfsg-2_all.deb
09f99f28b96e6caeb987eac14cf93e24 9322 web optional
egroupware-ldap_1.2.107-2.dfsg-2_all.deb
15442ca4999f301c80ce9e894f889abd 208696 web optional
egroupware-addressbook_1.2.107-2.dfsg-2_all.deb
aeefb42052ce185ed6fb776380dbce47 134698 web optional
egroupware-bookmarks_1.2.107-2.dfsg-2_all.deb
dbcd978cc2553cc9f9f1360080c0a698 425490 web optional
egroupware-calendar_1.2.107-2.dfsg-2_all.deb
0947ec3232a90c2aecde722afe311632 61704 web optional
egroupware-developer-tools_1.2.107-2.dfsg-2_all.deb
c37b36a290a72d5f0ecd384308b8b150 53584 web optional
egroupware-emailadmin_1.2.107-2.dfsg-2_all.deb
bf270ec4a60f97e031f61a122190c6f3 582840 web optional
egroupware-etemplate_1.2.107-2.dfsg-2_all.deb
3bdd037c1b0f9e2475b96029af1e637a 290734 web optional
egroupware-felamimail_1.2.107-2.dfsg-2_all.deb
199c534abfd8a29fed8f7bc52b0dfc72 168390 web optional
egroupware-filemanager_1.2.107-2.dfsg-2_all.deb
e973bb4b28f8c16c41824c91de396d23 217208 web optional
egroupware-infolog_1.2.107-2.dfsg-2_all.deb
76fae86f30f973fc27fbef42b3df6f2e 31294 web optional
egroupware-manual_1.2.107-2.dfsg-2_all.deb
c7c43ebab7f06ac15965c4efeb178875 566424 web optional
egroupware-mydms_1.2.107-2.dfsg-2_all.deb
2a39e65759989e02e8ee873773853595 60790 web optional
egroupware-news-admin_1.2.107-2.dfsg-2_all.deb
8febf80d8082742a46f8b5573e3851c9 135080 web optional
egroupware-phpbrain_1.2.107-2.dfsg-2_all.deb
2322cc49b8e4265c2b9e1104e9b46482 229506 web optional
egroupware-phpsysinfo_1.2.107-2.dfsg-2_all.deb
f6f487e6fad9690130ea9cb5516d7efd 43854 web optional
egroupware-polls_1.2.107-2.dfsg-2_all.deb
5610c43df9697d5fc2f84dcddb7d6036 557446 web optional
egroupware-projectmanager_1.2.107-2.dfsg-2_all.deb
3b2221e9da3790b4b9d86a0fb9d030ab 114246 web optional
egroupware-registration_1.2.107-2.dfsg-2_all.deb
b7c8ed3e811569fa574d0bc708832fd8 69400 web optional
egroupware-resources_1.2.107-2.dfsg-2_all.deb
c808e01c281dbb52b05dac5d982a59cb 25530 web optional
egroupware-sambaadmin_1.2.107-2.dfsg-2_all.deb
849a97b7f376f40511865cd99011dc24 555992 web optional
egroupware-sitemgr_1.2.107-2.dfsg-2_all.deb
4ac700cf49a4f26322489da5904c2e24 39522 web optional
egroupware-timesheet_1.2.107-2.dfsg-2_all.deb
970daec1fdbfd4dfbb38c5f130c0c1e3 111320 web optional
egroupware-wiki_1.2.107-2.dfsg-2_all.deb
3969ef55ac04bf182b16ccea6d8f6cbf 342106 web optional
egroupware-workflow_1.2.107-2.dfsg-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHCjN3TTx8oVVPtMYRAqbAAJ46iILOz7J4iRCslf+jJGlrGL5BtACgtJa8
IXLMTN0qNXRWRQm5vQ33jWg=
=q692
-----END PGP SIGNATURE-----
--- End Message ---
