----------------------------------------------------------------------


Looking for a job?


Secunia is hiring skilled researchers and talented developers.


http://secunia.com/company/jobs/


----------------------------------------------------------------------

TITLE:
Debian update for phpgroupware

SECUNIA ADVISORY ID:
SA39731

VERIFY ADVISORY:
http://secunia.com/advisories/39731/

DESCRIPTION:
Debian has issued an update for phpgroupware. This fixes some
vulnerabilities, which can be exploited by malicious people to
conduct SQL injection attacks and disclose sensitive information.

For more information:
SA39665

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 5.0 alias lenny --

Source archives:

http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware_0.9.16.012+dfsg.orig.tar.gz
Size/MD5 checksum: 19383160 bbfcfa12aca69b4032d7b4d38aeba85f
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware_0.9.16.012+dfsg-8+lenny2.dsc
Size/MD5 checksum: 1662 1a1ff2d6badf454ba2b948ee1268e57b
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware_0.9.16.012+dfsg-8+lenny2.diff.gz
Size/MD5 checksum: 74293 9ba66bc79bc0f5bb6454a3372bc2bfd8

Architecture independent packages:

http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-filemanager_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 91562 51f6a2473368c6c21d19b8fd6349635f
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-phpgwapi-doc_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 7985242 c19ed260050702c356c4d14db87e3f0d
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 20158 c09431d20a4d833841340ea79e03854d
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-setup_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 281402 2fc54aa2367098332f67b846b17d8c7a
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-core-base_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 48876 41cc095cbbc3bd97ae36754405df60b9
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-email_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 1167580 4b63e0460fb590082a29391d26331b1e
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-phpgwapi_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 1529004 52216c8fa04c49ebf2d5d12aa6a8013a
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 22522 783f747d25f32fe4024db807a0727261
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-core_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 4726 0a3140a4bdc80c8b421ef865c1f730d3
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-doc_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 130240 dc11591ae411a496bc5828d88eaed65d
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-todo_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 50810 b632b74158236fea55b5014830c26369
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-preferences_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 60432 8355e743ea535fbb8b5afef5bcb196bb
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-manual_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 93564 f44dbd8f6b2902d4980c4ec23d955d02
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-news-admin_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 41194 9ed410fd27d8e0c7430a90fa2eaabb70
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-calendar_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 270288 ffa447f1b07658090d9acdec93ef31a5
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-admin_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 188302 84057847fe79ad066a751a0b5f1abef7
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-addressbook_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 176400 0294b85b1e34e7879edbc4ee832dfa43
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupware-0.9.16-notes_0.9.16.012+dfsg-8+lenny2_all.deb
Size/MD5 checksum: 33074 95aff5b1efc3ba4eeb3a5756549ae070

ORIGINAL ADVISORY:
DSA-2046-1:
http://lists.debian.org/debian-security-announce/2010/msg00087.html

OTHER REFERENCES:
SA39665:
http://secunia.com/advisories/39665/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------