[pkg-horde] Bug#464058: [horde-vendor] Bug#464058: turba access checking issue

[Gregory Colpart]

Hi Chuck,

On Fri, Feb 15, 2008 at 12:42:56AM -0500, Chuck Hagenbuch wrote:
> 
> Finally, these should be the patches for the upcoming Turba 2.1.7 and  
> Turba 2.2-RC3 releases. I plan to roll them tomorrow (Friday) morning,  
> U.S Eastern time. I'm also attaching a patch for HEAD for anyone who  
> wants/needs it.

Thanks a lot for your final patches. Turba 2.1.7 is already in
Debian unstable distribution. But for Debian stable and
oldstable, I can't upload version 2.1.7: I need backport
security changes. Could you review my backported patches?

- Patch for Turba 2.1.4 (Debian stable):
http://gcolpart.evolix.net/debian/turba2/turba2_2.1.3-1_2.1.3-1etch1.diff

- Patch for Turba 2.0.2 (Debian oldstable):
http://gcolpart.evolix.net/debian/turba2/turba2_2.0.2-1_2.0.2-1sarge1.diff


Note: FYI, Debian security team requested CVE id for this security issue.

Regards,
-- 
Gregory Colpart <reg at evolix.fr>  GnuPG:1024D/C1027A0E
Evolix - Informatique et Logiciels Libres http://www.evolix.fr/