Bug#798895: jessie-pu: package owncloud/7.0.4+dfsg-4~deb8u2
Control: tags -1 + confirmed
On Sun, 2015-09-13 at 16:56 -0400, David Prévot wrote:
> As already discussed with the security team, please accept the fixes for
> CVE-2015-{471{6..8},6670} in owncloud. Source debdiff attached.
>
> As noted in the ownCloud tracker, CVE-2015-4716 is only relevant on
> Windows, yet I’d still like to include its fix in order to avoid making
> any assumptions about how safely people are setting their servers: the
> one-liner fix is just about sanitizing variables, that should anyway be
> a good idea.
>
> 1: https://owncloud.org/security/advisory/?id=oc-sa-2015-006
Please go ahead.
Regards,
Adam
Reply to: