[sitebar] Several remote vulnerabilities

[disabled.user]

Binary package hint: sitebar

References:
DSA-1423-1 (http://www.debian.org/security/2007/dsa-1423)

Quoting:
"Several remote vulnerabilities have been discovered in sitebar, a web based bookmark manager written in PHP."

For further information, see Debian's BTS and the CVS links.

[disabled.user (disabled.user-deactivatedaccount)]

I was trying to add the mentioned Debian bugs from the DSA, but unfortunately launchpad only lets me add one bug per package per distribution. Here are the direct links, just for convenience:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447135
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448689
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448690

[Wouter Stomp (wouterstomp-deactivatedaccount)]

These have all been fixed in hardy in 3.3.8-12.1. Does this need to be backported?

[Stephan Rügamer (sruegamer)]

Well,

someone needs to check the versions in gutsy, feisty, edgy, dapper, if they are vulnerable too.

Anyone? Emgent?

\sh

[Hew (hew)]

Ubuntu Edgy Eft is no longer supported, so a SRU will not be issued for this release. Marking Edgy as Won't Fix.

[Hew (hew)]

Ubuntu Feisty Fawn is no longer supported, so a SRU will not be issued for this release. Marking Feisty as Won't Fix.

[Sergio Zanchetta (primes2h)]

The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life -
http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the
Gutsy task.

[Jamie Strandboge (jdstrand)]

Thank you for reporting this bug to Ubuntu. dapper has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against dapper is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.