phpgroupware - programming errors

Several vulnerabilities have been discovered in phpsysinfo, a PHP
based host information application that is included in phpgroupware.
The Common Vulnerabilities and
Exposures project identifies the following problems:

• CVE-2005-0870
  Maksymilian Arciemowicz discovered several cross site scripting
  problems, of which not all were fixed in
  DSA 724.
• CVE-2005-3347
  Christopher Kunz discovered that local variables get overwritten
  unconditionally and are trusted later, which could lead to the
  inclusion of arbitrary files.
• CVE-2005-3348
  Christopher Kunz discovered that user-supplied input is used
  unsanitised, causing a HTTP Response splitting problem.

For the old stable distribution (woody) these problems have been fixed in
version 0.9.14-0.RC3.2.woody5.

For the stable distribution (sarge) these problems have been fixed in
version 0.9.16.005-3.sarge4.

For the unstable distribution (sid) these problems have been fixed in
version 0.9.16.008-2.

We recommend that you upgrade your phpgroupware packages.