[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: owncloud: old version with security issues (no idea how severe)



Hi Alexander, hi Rhonda,

On  Mi 30 Apr 2014 13:17:59 CEST, Mike Gabriel wrote:

Hi all-owncloud-for-wheezy-interested-people,

On  Mo 28 Apr 2014 13:35:05 CEST, Mike Gabriel wrote:

Hi Ansgar,

On  Mo 28 Apr 2014 12:44:44 CEST, Ansgar Burchardt wrote:

Hi,

I noticed that the owncloud packages in wheezy-backports are still at
version 5.0.14.a. There has been a new upstream release (5.0.15) in
March that fixes several security issues according to the changelog[1]
(which doesn't have any specifics).

Could the package be updated to the current version in testing?

Ansgar

[1] <http://owncloud.org/changelog/>

I am working on this... Hope to provide first dependency uploads (wheezy-bpo NEW) during this week.

I have started pushing the expanded dependency stack of owncloud to wheezy-backports this morning. Some of the packages I took from unstable as the package versions in testing show security issues.

  php-dompdf_0.6.1+dfsg-2~bpo70+1_amd64.changes (unstable)
php-font-lib_0.2.2+dfsg-2~bpo70+1_amd64.changes (unstable, version-required by php-dompdf)

  php-symfony-eventdispatcher_2.3.1-1~bpo70+1_amd64.changes (testing)
  php-guzzle_3.7.0-1~bpo70+1_amd64.changes (testing)
  tcpdf_6.0.048+dfsg-2~bpo70+1_amd64.changes (testing)
  php-getid3_1.9.7-2~bpo70+1_amd64.changes (testing)
  phpdocx_3.0+dfsg-2~bpo70+1_amd64.changes (testing)
  php-doctrine-common_2.3.0-1~bpo70+1_amd64.changes (testing)

I'd be happy if those packages could be processed in the near future, so we get this owncloud security issue off the list (and sorry for the delay already caused by my own crammed agenda)

I just realized, that one more install-dependency is missing for owncloud:

  php-symfony-console 2.3.1+dfsg-1~bpo70+1


I just upload this to wheezy-bpo NEW. Hope one of you can process it soon.

Thanks!
Mike

--

mike gabriel aka sunweaver (Debian Developer)
fon: +49 (1520) 1976 148

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, http://sunweavers.net

Attachment: pgpvNUZHwCzbH.pgp
Description: Digitale PGP-Signatur


Reply to: