[Mageia-dev] Freeze push: owncloud

Nicolas Lécureuil nicolas.lecureuil at free.fr
Mon Jan 28 00:11:41 CET 2013


hi,

please let go owncloud, it fixes securities issues.

Security: Fix multiple XSS problems: CVE-2013-0201, CVE-2013-0202, 
CVE-2013-0203[1]
Security: Fix Code execution in external storage: CVE-2013-0204[2]
Security: Auth bypass in user_webdavauth and user_ldap (oC-SA-2012-006[3])
Security: XSS vulnerability in bookmarks (oC-SA-2012-007[4])
XSS vulnerability in user_webdavauth (oC-SA-2012-003[5])
Code Execution in /lib/migrate.php (oC-SA-2012-004[6])
Code Execution in /lib/filesystem.php (oC-SA-2012-005[7])

--------
[1] http://owncloud.org/about/security/advisories/oC-SA-2013-001/
[2] http://owncloud.org/about/security/advisories/oc-sa-2013-002/
[3] http://owncloud.org/about/security/advisories/oc-sa-2012-006/
[4] http://owncloud.org/about/security/advisories/oc-sa-2012-007/
[5] http://owncloud.org/about/security/advisories/oc-sa-2012-003/
[6] http://owncloud.org/about/security/advisories/oc-sa-2012-004/
[7] http://owncloud.org/about/security/advisories/oc-sa-2012-005/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/mageia-dev/attachments/20130128/5876af5e/attachment.html>


More information about the Mageia-dev mailing list