[pkg-horde] Bug#585165: Bug#585165: CVE-2010-1916: Security issue in Xinha

[Alexander Reichle-Schmehl]

Hi!

Am 18.07.2010 01:18, schrieb Gregory Colpart:

>>>> Please check if your code copy is affected and update the internal copy.
>>> I think code copy of xinha in Horde is not affected because there
>>> is no PHP code from Xinha on it. Majority of Xinha plugins are
>>> not present.
>> Is there a specific reason, why this bug is open, if the problem doesn't exist?
> I was hoping a confirmation of my analysis

I just looked at the code, and it seems to me, you are right:  Neither
horde3 3.3.8+debian0-1 (sid/squeeze) nor horde3 3.2.2+debian0-2+lenny2
(lenny) are affected.


Best regards,
  Alexander