[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#798895: jessie-pu: package owncloud/7.0.4+dfsg-4~deb8u2



Control: tags -1 + confirmed

On Sun, 2015-09-13 at 16:56 -0400, David Prévot wrote:
> As already discussed with the security team, please accept the fixes for
> CVE-2015-{471{6..8},6670} in owncloud. Source debdiff attached.
> 
> As noted in the ownCloud tracker, CVE-2015-4716 is only relevant on
> Windows, yet I’d still like to include its fix in order to avoid making
> any assumptions about how safely people are setting their servers: the
> one-liner fix is just about sanitizing variables, that should anyway be
> a good idea.
> 
> 1: https://owncloud.org/security/advisory/?id=oc-sa-2015-006

Please go ahead.

Regards,

Adam


Reply to: