Subject: Bug#164354: fixed in phpgroupware 0.9.14.007-4

From: Thomas Viehmann <[email-masked]>
Date: Mon, 05 Jan 2004 01:47:20 -0500

Source: phpgroupware
Source-Version: 0.9.14.007-4

We believe that the bug you reported is fixed in the latest version of
phpgroupware, which is due to be installed in the Debian FTP archive:

phpgroupware-addressbook_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-addressbook_0.9.14.007-4_all.deb
phpgroupware-admin_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-admin_0.9.14.007-4_all.deb
phpgroupware-backup_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-backup_0.9.14.007-4_all.deb
phpgroupware-bookmarks_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-bookmarks_0.9.14.007-4_all.deb
phpgroupware-brewer_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-brewer_0.9.14.007-4_all.deb
phpgroupware-calendar_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-calendar_0.9.14.007-4_all.deb
phpgroupware-chat_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-chat_0.9.14.007-4_all.deb
phpgroupware-chora_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-chora_0.9.14.007-4_all.deb
phpgroupware-comic_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-comic_0.9.14.007-4_all.deb
phpgroupware-core_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-core_0.9.14.007-4_all.deb
phpgroupware-developer-tools_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-developer-tools_0.9.14.007-4_all.deb
phpgroupware-dj_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-dj_0.9.14.007-4_all.deb
phpgroupware-eldaptir_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-eldaptir_0.9.14.007-4_all.deb
phpgroupware-email_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-email_0.9.14.007-4_all.deb
phpgroupware-felamimail_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-felamimail_0.9.14.007-4_all.deb
phpgroupware-forum_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-forum_0.9.14.007-4_all.deb
phpgroupware-ftp_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-ftp_0.9.14.007-4_all.deb
phpgroupware-headlines_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-headlines_0.9.14.007-4_all.deb
phpgroupware-hr_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-hr_0.9.14.007-4_all.deb
phpgroupware-img_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-img_0.9.14.007-4_all.deb
phpgroupware-infolog_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-infolog_0.9.14.007-4_all.deb
phpgroupware-inv_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-inv_0.9.14.007-4_all.deb
phpgroupware-manual_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-manual_0.9.14.007-4_all.deb
phpgroupware-meerkat_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-meerkat_0.9.14.007-4_all.deb
phpgroupware-messenger_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-messenger_0.9.14.007-4_all.deb
phpgroupware-netsaint_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-netsaint_0.9.14.007-4_all.deb
phpgroupware-news-admin_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-news-admin_0.9.14.007-4_all.deb
phpgroupware-nntp_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-nntp_0.9.14.007-4_all.deb
phpgroupware-notes_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-notes_0.9.14.007-4_all.deb
phpgroupware-phonelog_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-phonelog_0.9.14.007-4_all.deb
phpgroupware-phpgwapi_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-phpgwapi_0.9.14.007-4_all.deb
phpgroupware-phpsysinfo_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-phpsysinfo_0.9.14.007-4_all.deb
phpgroupware-phpwebhosting_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-phpwebhosting_0.9.14.007-4_all.deb
phpgroupware-polls_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-polls_0.9.14.007-4_all.deb
phpgroupware-preferences_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-preferences_0.9.14.007-4_all.deb
phpgroupware-projects_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-projects_0.9.14.007-4_all.deb
phpgroupware-registration_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-registration_0.9.14.007-4_all.deb
phpgroupware-setup_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-setup_0.9.14.007-4_all.deb
phpgroupware-skel_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-skel_0.9.14.007-4_all.deb
phpgroupware-soap_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-soap_0.9.14.007-4_all.deb
phpgroupware-stocks_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-stocks_0.9.14.007-4_all.deb
phpgroupware-todo_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-todo_0.9.14.007-4_all.deb
phpgroupware-xmlrpc_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware-xmlrpc_0.9.14.007-4_all.deb
phpgroupware_0.9.14.007-4.diff.gz
  to pool/main/p/phpgroupware/phpgroupware_0.9.14.007-4.diff.gz
phpgroupware_0.9.14.007-4.dsc
  to pool/main/p/phpgroupware/phpgroupware_0.9.14.007-4.dsc
phpgroupware_0.9.14.007-4_all.deb
  to pool/main/p/phpgroupware/phpgroupware_0.9.14.007-4_all.deb
phpgroupware_0.9.14.007.orig.tar.gz
  to pool/main/p/phpgroupware/phpgroupware_0.9.14.007.orig.tar.gz

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email-masked],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Viehmann <[email-masked]> (supplier of updated phpgroupware package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email-masked])

Format: 1.7
Date: Sat,  3 Jan 2004 21:47:07 +0100
Source: phpgroupware
Binary: phpgroupware-stocks phpgroupware-skel phpgroupware-chora phpgroupware-email phpgroupware-netsaint phpgroupware-admin phpgroupware-meerkat phpgroupware-inv phpgroupware-notes phpgroupware-hr phpgroupware-preferences phpgroupware-felamimail phpgroupware-infolog phpgroupware-headlines phpgroupware-brewer phpgroupware-backup phpgroupware-news-admin phpgroupware-img phpgroupware-developer-tools phpgroupware-forum phpgroupware-nntp phpgroupware-chat phpgroupware-messenger phpgroupware-projects phpgroupware-polls phpgroupware-ftp phpgroupware-xmlrpc phpgroupware-dj phpgroupware-bookmarks phpgroupware-manual phpgroupware-calendar phpgroupware-phpsysinfo phpgroupware-eldaptir phpgroupware-registration phpgroupware-core phpgroupware-phonelog phpgroupware-setup phpgroupware-phpgwapi phpgroupware-comic phpgroupware-addressbook phpgroupware-phpwebhosting phpgroupware phpgroupware-todo phpgroupware-soap
Architecture: source all
Version: 0.9.14.007-4
Distribution: unstable
Urgency: low
Maintainer: Thomas Viehmann <[email-masked]>
Changed-By: Thomas Viehmann <[email-masked]>
Description: 
 phpgroupware - web based groupWare system written in PHP
 phpgroupware-addressbook - phpGrouhpWare addressbook management module
 phpgroupware-admin - phpGroupWare administration module
 phpgroupware-backup - phpGroupWare backup module
 phpgroupware-bookmarks - phpGroupWare bookmark management module
 phpgroupware-brewer - phpGroupWare homebrewing module
 phpgroupware-calendar - phpGroupWare calendar management module
 phpgroupware-chat - phpGroupWare chat module
 phpgroupware-chora - phpGroupWare CVS interface module
 phpgroupware-comic - phpGroupWare comic strip parser module
 phpgroupware-core - empty transitional package for phpGroupWare
 phpgroupware-developer-tools - phpGroupWare developer tools
 phpgroupware-dj - phpGroupWare mp3 db interface module
 phpgroupware-eldaptir - phpGroupWare LDAP tree editor module
 phpgroupware-email - phpGroupWare E-Mail client module
 phpgroupware-felamimail - phpGroupWare felamimail (Squirrelmail) module
 phpgroupware-forum - phpGroupWare forum module
 phpgroupware-ftp - phpGroupWare ftp module
 phpgroupware-headlines - phpGroupWare headlines catcher module
 phpgroupware-hr - phpGroupWare human resource management module
 phpgroupware-img - phpGroupWare image editor module
 phpgroupware-infolog - phpGroupWare infolog applcation
 phpgroupware-inv - phpGroupWare inventory module
 phpgroupware-manual - phpGroupWare on-line manual module
 phpgroupware-meerkat - phpGroupWare Meerkat's story module
 phpgroupware-messenger - phpGroupWare messenger module
 phpgroupware-netsaint - phpGroupWare NetSaint administration module
 phpgroupware-news-admin - phpGroupWare news administration interface
 phpgroupware-nntp - phpGroupWare newsgroup reader module
 phpgroupware-notes - phpGroupWare notes management module
 phpgroupware-phonelog - phpGroupWare phone logging module
 phpgroupware-phpgwapi - phpGroupWare API
 phpgroupware-phpsysinfo - phpGroupWare phpSysInfo module
 phpgroupware-phpwebhosting - phpGroupWare next generation file manager module
 phpgroupware-polls - phpGroupWare polling module
 phpgroupware-preferences - phpGroupWare preferences management module
 phpgroupware-projects - phpGroupWare projects management module
 phpgroupware-registration - phpGroupWare registration module
 phpgroupware-setup - phpGroupWare setup III module
 phpgroupware-skel - phpGroupWare skeleton module
 phpgroupware-soap - phpGroupWare SOAP module
 phpgroupware-stocks - phpGroupWare stock management module
 phpgroupware-todo - phpGroupWare todo list management module
 phpgroupware-xmlrpc - phpGroupWare XMLRPC module
Closes: 164354 166574 166579 170818 170820 170841 173871 181935 183896 183991 197702 201980 207777 207797 209692 209809 209817 209832 209941 209954 209980 209992 210043 210064 210143 210153 210176 211161 211639 216306 225342
Changes: 
 phpgroupware (0.9.14.007-4) unstable; urgency=low
 .
   * Uwe Steinmann and Jamin W. Collins did some more bug research.
     Quite a few were closed by the packaging changes and upstream
     bug fixing.
     - Preservation of user changes (Closes: #170820)
     - Configuration of apache-ssl on initial install (Closes: #166574)
     - fixed postrm bug dupe (Closes: #170841)
     - ldap schema now included (Closes: #197702)
     - README.Debian was written. (Closes: #170818)
     - Version display on login page even shows debian revision
       (Closes: #166579)
     - wwwconfig-common not called if removed during purge
       (Closes: #211161, #211639)
     - wwwconfig-common bug in mysql execution fixed (Closes: #207777)
     - '&' in passwords seems to work now (Closes: #181935)
     Fix permissions to /var/lib/phpgroupware/sessions
     This fixes php4 session type. (Closes: #173871)
   * The descriptions have been improved.
     Closes: #209809, #210153, #209817, #209941, #210043, #210176, #210064,
     #210143, #209692, #209954, #209832, #209980, #209992.
 .
 phpgroupware (0.9.14.007-3) unstable; urgency=low
 .
   * Various rules file improvements, allow splitting of source packages
     if desired.
   * Drop packages not yet in sid. (See debian/control.disabled in source.)
 .
 phpgroupware (0.9.14.007-2) unstable; urgency=low
 .
   * Some configuration (debconf use) modifications.
     (Good ideas by Jamin W. Collins (thanks!), bad mistakes by myself.)
     - Remove old debconf upgrade notice
     - Erase admin password in postinst/postrm and reprompt
       where needed.
     - Rephrase some questions.
     - Try to guess administrator name.
     - Reduce db options to mysql and postgres.
   * Fixes to the web based configuration in phpGroupWare
     (Again, thanks to Jamin)
     - Add big fat notice about passwords being displayed in header
       configuration until a fix for the fact itself is ready
     - Fix display of "configuration complete" (in setup/index.php)
       before the user has seen setup/config.php.
     - Improve some language-output. (English only, this needs to be
       better.)
   * Include some modules that had not been in control file.
   * Grant locking rights to phpgroupware mysql account (closes: #225342)
 .
 phpgroupware (0.9.14.007-1) unstable; urgency=low
 .
   * New upstream release
     Security fixes (Closes: #216306):
      - SQL injection in infolog (escaping strings in queries)
      - script injection in calendar
        (holiday files now need extension .txt)
        postinst of calendar will rename files in
        /usr/share/phpgroupware/calendar/phpgroupware.org
   * Remove empty phpgroupware/examples directory
     (Suggestion by Uwe Steinmann, thanks)
   * Fix permissions of files directory (Closes: #207797)
   * New Debian maintainer.
   * Remove link /usr/share/phpgroupware/files, this is needed
     to fix vfs storage problem noted in CAN-2003-0599 and
     addressed by version 0.9.14.005.
   * Fold phpgroupware-core package into phpgroupware.
   * Tweak the build process to weed out lintian errors and reduce
     the number of warnings.
 .
 phpgroupware (0.9.14.006-1) unstable; urgency=low
 .
   * Inofficial release not for debian general usage.
   * New upstream release
   * Corrected illfix to #183896. (Correction pointed out by Luca.)
 .
 phpgroupware (0.9.14.005-1) unstable; urgency=low
 .
   * New upstream version
 .
     Includes security fixes for
     - cross site scripting (CAN-2003-0504),
       see <http://www.security-corporation.com/articles-20030702-005.html>
     - sql insertion (CAN-2003-0657)
     - vfs storage in document dir now prohibited (CAN-2003-0599)
     - Remove $appdir in includes in tables_update.inc.php to prevent
       execution of arbitrary scripts.
     Closes: #201980
 .
   * Repackaging more or less from scratch.
     - Used parts from Luca's / Tilo's packaging.
       See changelog.old.gz for details.
     - Undo source split.
   * Skip invocation wwwconfig-common's utils when they're not present.
     (Closes: #183896)
   * Call db_stop after debhelper includes. (Closes: #164354)
   * Add patch by Toni Mueller to fix manageheader.php's inclusion of
     header.inc.php. (Closes: #183991).
Files: 
 ec4234cdc7cdb0c680d16ebfc5a5c33c 1544 web optional phpgroupware_0.9.14.007-4.dsc
 928d82976cd179b8117b22fea01c1c31 26288 web optional phpgroupware_0.9.14.007-4.diff.gz
 7943d33781c7d38f60a5035eee9558cc 7066920 web optional phpgroupware_0.9.14.007.orig.tar.gz
 0c8cccb202b11cb094658d1cf6b635e9 117188 web optional phpgroupware_0.9.14.007-4_all.deb
 b4f3c7da6cfe867b56ea891c6d7ff679 3960 web optional phpgroupware-core_0.9.14.007-4_all.deb
 86f9e1068b441d92ec3a81508fa71af5 84426 web optional phpgroupware-addressbook_0.9.14.007-4_all.deb
 f873f801dbe56f831bbdecbcb85f3a15 139868 web optional phpgroupware-admin_0.9.14.007-4_all.deb
 44e2e89b44bdf5a07d5fd3b03febae48 24052 web optional phpgroupware-backup_0.9.14.007-4_all.deb
 4c007db84e19f79eda1449a4ff29f794 110924 web optional phpgroupware-bookmarks_0.9.14.007-4_all.deb
 b47aef035fc21b1db07d12080fccd1d9 53538 web optional phpgroupware-brewer_0.9.14.007-4_all.deb
 37f9a517d2057a7c1c9513cd1ec7befb 250368 web optional phpgroupware-calendar_0.9.14.007-4_all.deb
 4da735437f9ef7e9a23226dca7923aa2 14812 web optional phpgroupware-chat_0.9.14.007-4_all.deb
 85d7feca770a28067190b2574201ef62 43082 web optional phpgroupware-chora_0.9.14.007-4_all.deb
 38f71ee40b8ab3b0299cadb87fb27ca1 225938 web optional phpgroupware-comic_0.9.14.007-4_all.deb
 1cbeb3949a6a429b1444a5a2dd11b58a 35768 web optional phpgroupware-dj_0.9.14.007-4_all.deb
 359f113b70bc0fb689ea608fa6aef2a3 46966 web optional phpgroupware-eldaptir_0.9.14.007-4_all.deb
 65a37032046deddac38dc8b2cb29199a 642902 web optional phpgroupware-email_0.9.14.007-4_all.deb
 f4252a25b00d5ba6bc35b6c1988c4fcb 153836 web optional phpgroupware-felamimail_0.9.14.007-4_all.deb
 b21adfe0034b255d2ba04c6d1dff3a88 38642 web optional phpgroupware-forum_0.9.14.007-4_all.deb
 b3297595b8e0dc0b119c5331d84fb0ff 29578 web optional phpgroupware-ftp_0.9.14.007-4_all.deb
 228a49e450821364d0eac70a0f7a4807 56988 web optional phpgroupware-headlines_0.9.14.007-4_all.deb
 408d31cea6252bd40ba4c6de578a2d55 12802 web optional phpgroupware-hr_0.9.14.007-4_all.deb
 552bd0dfe9e43f502ac74d80e894cbf2 27992 web optional phpgroupware-img_0.9.14.007-4_all.deb
 f2015d2067bbb90cb5fdb1db1754f7c8 92520 web optional phpgroupware-infolog_0.9.14.007-4_all.deb
 55c8444a95af4d57a5d2e32dc761a4f2 84000 web optional phpgroupware-inv_0.9.14.007-4_all.deb
 6c13ba8d8aaa660ffba6960eec2b9b3a 84580 web optional phpgroupware-manual_0.9.14.007-4_all.deb
 4869bd451be577406849e80f8d5b27bc 16130 web optional phpgroupware-meerkat_0.9.14.007-4_all.deb
 f072e1fea8d4b13f863e9fd22e619cae 19250 web optional phpgroupware-messenger_0.9.14.007-4_all.deb
 f15524779cb9a49aea13b85b24df4afd 76636 web optional phpgroupware-netsaint_0.9.14.007-4_all.deb
 f8f4a716fea5201359c9aa4a6b7573f9 38530 web optional phpgroupware-nntp_0.9.14.007-4_all.deb
 0a9a5ad7ff8743f7ba00d867cdf8596a 23748 web optional phpgroupware-notes_0.9.14.007-4_all.deb
 0e796128b2fcce3a43e2be808514fc6b 17836 web optional phpgroupware-phonelog_0.9.14.007-4_all.deb
 6ab01a4e6e710c3246510310681d74c5 943034 web optional phpgroupware-phpgwapi_0.9.14.007-4_all.deb
 5c19eab72a3f26a185d74d8baabe22a0 31674 web optional phpgroupware-phpsysinfo_0.9.14.007-4_all.deb
 d5fc54882016bc5b6ecd6db51f928119 61184 web optional phpgroupware-phpwebhosting_0.9.14.007-4_all.deb
 b7209842607c52c10d1779fba4e7ef2d 19742 web optional phpgroupware-polls_0.9.14.007-4_all.deb
 90c91ef68c0aa8cdace7a9964f538c00 39170 web optional phpgroupware-preferences_0.9.14.007-4_all.deb
 bed460e04cb635a759c30029b7939e32 90862 web optional phpgroupware-projects_0.9.14.007-4_all.deb
 d58a03a632adf418e5ed951401e5356b 25400 web optional phpgroupware-registration_0.9.14.007-4_all.deb
 232eb18f61f9ed075fdb4e95ac16b113 262562 web optional phpgroupware-setup_0.9.14.007-4_all.deb
 57be4c26e2e6697d0e909e180db2c6d6 14136 web optional phpgroupware-skel_0.9.14.007-4_all.deb
 59ec95051b4938017655505af3ee08ad 18698 web optional phpgroupware-soap_0.9.14.007-4_all.deb
 08fbe0c9c6394467a917cea6f955b950 16072 web optional phpgroupware-stocks_0.9.14.007-4_all.deb
 652385963a5f5f3f85a1aa428ec8cdf5 38044 web optional phpgroupware-todo_0.9.14.007-4_all.deb
 c9152aa958bd59edd05a35fb2c1d8379 56348 web optional phpgroupware-xmlrpc_0.9.14.007-4_all.deb
 f6e4bee29bb39409529e71ababfcfe9f 24502 web optional phpgroupware-developer-tools_0.9.14.007-4_all.deb
 29141fd1fb8f004b079b8a4ad27ea231 21438 web optional phpgroupware-news-admin_0.9.14.007-4_all.deb