From bounce-debian-bugs-dist==chris-lamb.co.uk@lists.debian.org Sun Apr 20 15:04:54 2008
Received: from liszt.debian.org ([82.195.75.100])
	by chris-lamb.co.uk with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32)
	(Exim 4.63)
	(envelope-from <bounce-debian-bugs-dist==chris-lamb.co.uk@lists.debian.org>)
	id 1Jna9y-0007LS-Af
	for bot.address@chris-lamb.co.uk; Sun, 20 Apr 2008 15:04:54 +0100
Received: from localhost (localhost [127.0.0.1])
	by liszt.debian.org (Postfix) with QMQP
	id 2B87613A5023; Sun, 20 Apr 2008 14:04:49 +0000 (UTC)
Old-Return-Path: <debbugs@rietz.debian.org>
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on liszt.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.9 required=4.0 tests=BAYES_00,FOURLA,
	RCVD_IN_DNSWL_LOW autolearn=no version=3.2.3
X-Original-To: debian-bugs-dist@lists.debian.org
Delivered-To: lists-debian-bugs-dist@liszt.debian.org
Received: from rietz.debian.org (rietz.debian.org [140.211.166.43])
	by liszt.debian.org (Postfix) with ESMTP id 79A2813A4F06;
	Sun, 20 Apr 2008 14:04:38 +0000 (UTC)
Received: from debbugs by rietz.debian.org with local (Exim 4.63)
	(envelope-from <debbugs@rietz.debian.org>)
	id 1Jna8G-0002pb-RM; Sun, 20 Apr 2008 14:03:04 +0000
X-Loop: owner@bugs.debian.org
Subject: Bug#476977: Security fix in new upstream release
Reply-To: Lars Wilke <lw@lwilke.de>, 476977@bugs.debian.org
Resent-From: Lars Wilke <lw@lwilke.de>
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Debian Security Team <team@security.debian.org>, Peter Eisentraut <petere@debian.org>
Resent-Date: Sun, 20 Apr 2008 14:03:02 +0000
Resent-Message-ID: <handler.476977.B.120869996417231@bugs.debian.org>
X-Debian-PR-Message: report 476977
X-Debian-PR-Package: egroupware
X-Debian-PR-Keywords: security
X-Debian-PR-Source: egroupware
Received: via spool by submit@bugs.debian.org id=B.120869996417231
          (code B ref -1); Sun, 20 Apr 2008 14:03:02 +0000
Received: (at submit) by bugs.debian.org; 20 Apr 2008 13:59:24 +0000
X-Amavis-Spam-Status: No, score=-9.9 required=4.0 tests=BAYES_00,FOURLA,HAS_PACKAGE,
	RCVD_IN_SBLXBL,RCVD_IN_SBLXBL_CBL,X_DEBBUGS_CC autolearn=no 
	version=3.1.4-bugs.debian.org_2005_01_02
Received: from mr01.hansenet.de ([213.191.74.10])
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <lw@lwilke.de>)
	id 1Jna4i-0004Ml-Jv
	for submit@bugs.debian.org; Sun, 20 Apr 2008 13:59:24 +0000
Received: from ckLennard.net.home (85.177.140.155) by mr01.hansenet.de (7.3.132)
        id 47A004CB005B7CCA; Sun, 20 Apr 2008 15:59:17 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
	by ckLennard.net.home (Postfix) with ESMTP id 8077E5403C;
	Sun, 20 Apr 2008 15:59:17 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ckLennard.net.home
Received: from ckLennard.net.home ([127.0.0.1])
	by localhost (ckLennard.net.home [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id ZsT-jFEdlgrB; Sun, 20 Apr 2008 15:59:17 +0200 (CEST)
Received: by ckLennard.net.home (Postfix, from userid 1000)
	id 3C41A5403A; Sun, 20 Apr 2008 15:59:17 +0200 (CEST)
Date: Sun, 20 Apr 2008 15:59:17 +0200
From: Lars Wilke <lw@lwilke.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Message-ID: <20080420135917.GA7221@ckLennard.net.home>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
X-Reportbug-Version: 3.31
Delivered-To: submit@bugs.debian.org
Resent-Date: Sun, 20 Apr 2008 14:03:04 +0000
X-Debian-Message: from BTS
X-Rc-Virus: 2007-09-13_01
X-Rc-Spam: 2007-10-04_01
X-Mailing-List: <debian-bugs-dist@lists.debian.org> archive/latest/343513
X-Loop: debian-bugs-dist@lists.debian.org
List-Id: <debian-bugs-dist.lists.debian.org>
List-Post: <mailto:debian-bugs-dist@lists.debian.org>
List-Help: <mailto:debian-bugs-dist-request@lists.debian.org?subject=help>
List-Subscribe: <mailto:debian-bugs-dist-request@lists.debian.org?subject=subscribe>
List-Unsubscribe: <mailto:debian-bugs-dist-request@lists.debian.org?subject=unsubscribe>
Precedence: list
Resent-Sender: debian-bugs-dist-request@lists.debian.org
Received-SPF: none
X-SPF-Guess: pass
X-Spam-Score: -52.6
X-Spam-Report: (-52.6 points, 5.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	-50 D_FOR_BOT              For debian-devel-changes bot
	0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
	-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
	[score: 0.0000]

Package: egroupware
Version: 1.4.002.dfsg-2.1
Severity: critical
Tags: security

Hi, there is a new upstream release (1.4.004-2) available which fixes
a quite big security hole.

To quote the anouncement

 The fixed security problems are grave, if you have
 directories writable by the webserver in you docroot (in most
 windows server the complete docroot writable by default, but
 many linux servers are also set up that way).


thanks

   --lars

-- System Informato:
Debian Release: lenny/sid
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.18-6-vserver-k7
Locale: LANG=C, LC_CTYPE=de_DE@euro (charmap=ISO-8859-15)



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org


