Bugzilla Bug 181339

Description:
Some vulnerabilities with unknown impacts have been reported in eGroupWare.

The vulnerabilities are caused due to unknown errors in the wz_tooltips and
ADOdb libraries. No further information is currently available.

The vulnerabilities are reported in version 1.2.106-2. Other versions may also
be affected.

Solution:
Update to version 1.2.107-2 or 1.4.001.

Provided and/or discovered by:
Janosch Machowinski

Reproducible: Always

maintainers - please advice and bump as necessary

1.4.001 in the tree

Arches please test and mark stable. Target keywords are:

egroupware-1.4.001.ebuild:KEYWORDS="alpha amd64 hppa ppc ~sparc x86"

I edited the reference to files/postinstall-en-1.2.txt in the ebuild so that
the install doesn't fail (and committed the change to CVS) but I now find this
in [Check installation] on the site:

PEAR::Net_Socket is needed by: FeLaMiMail. PEAR (pear.php.net) is a PHP
repository and is usually in a package called php-pear.

However:

# qlop -lu PEAR-Net_Socket www-apps/egroupware-1.4
Sun Dec  3 23:38:02 2006 >>> dev-php/PEAR-Net_Socket-1.0.6-r1
Sun Jun 10 16:39:33 2007 >>> www-apps/egroupware-1.4.001
Sun Jun 10 16:46:56 2007 >>> dev-php/PEAR-Net_Socket-1.0.6-r1

http://pear.php.net/package/Net_Socket suggests there's a 1.0.8 with 1.0.6
being the latest in the tree. But maybe that doesn't solve the issue. I am just
passing on the information as I find it.

(In reply to comment #4)
> PEAR::Net_Socket is needed by: FeLaMiMail. PEAR (pear.php.net) is a PHP
> repository and is usually in a package called php-pear.

That's incomplete, sorry. The full error message is:

Checking PEAR::Net_Socket is installed: False
PEAR::Net_Socket is needed by: FeLaMiMail. PEAR (pear.php.net) is a PHP
repository and is usually in a package called php-pear.

(In reply to comment #5)
> Checking PEAR::Net_Socket is installed: False
> PEAR::Net_Socket is needed by: FeLaMiMail. PEAR (pear.php.net) is a PHP
> repository and is usually in a package called php-pear.

This problem seems to have fixed itself. Stable for HPPA. This problem sticks:

  IUSE.invalid                   1
   www-apps/egroupware/egroupware-1.4.001.ebuild: ical

(In reply to comment #5)
> Checking PEAR::Net_Socket is installed: False
> PEAR::Net_Socket is needed by: FeLaMiMail. PEAR (pear.php.net) is a PHP
> repository and is usually in a package called php-pear.

This problem seems to have fixed itself. Stable for HPPA. This problem sticks:

  IUSE.invalid                   1
   www-apps/egroupware/egroupware-1.4.001.ebuild: ical

It doesn't depend on php either

alpha/x86 stable

ppc stable

amd64 - please advice

amd64 stable

this here is ready for glsa decision

I tend to vote NO.

Unspecified vulnerabilities with unknown impacts due to unknown errors

--> i vote no too. Feel freee to reopen if you disagree.