-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 30 Sep 2015 19:23:46 -0400 Source: owncloud Binary: owncloud Architecture: source all Version: 7.0.4+dfsg-4~deb8u3 Distribution: jessie-security Urgency: high Maintainer: ownCloud for Debian maintainers <pkg-owncloud-maintainers@lists.alioth.debian.org> Changed-By: David Prévot <taffit@debian.org> Description: owncloud - cloud storage for files, music, contacts, calendars and many more Closes: 800126 Changes: owncloud (7.0.4+dfsg-4~deb8u3) jessie-security; urgency=high . * Backport security fixes from 7.0.5, 7.0.7, 8.0.6, and 7.0.9: - Fix stored XSS in "activity" application [oC-SA-2015-010] [CVE-2015-5953] - Fix disclosure of users files when deleting parent folders of shared files [oC-SA-2015-011] [CVE-2015-5954] - Fix information exposure through directory listing [oC-SA-2015-014] [CVE-2015-6500] (Closes: #800126) - Fix PHP arbitrary class instantiation in "files_external" [oC-SA-2015-018] Checksums-Sha1: 6d86bb8bec5736635be21a35fc4607d190157b80 1755 owncloud_7.0.4+dfsg-4~deb8u3.dsc 218f85138044f0e618b7a90571932169c3a46f47 150240 owncloud_7.0.4+dfsg-4~deb8u3.debian.tar.xz a54035ef7e06d251a7da92c31c07d0417f378d33 7537902 owncloud_7.0.4+dfsg-4~deb8u3_all.deb Checksums-Sha256: 5e1a1c549058334968ceee1532a458c46c46a21582c923cc0c3215b0b425e354 1755 owncloud_7.0.4+dfsg-4~deb8u3.dsc abbca94ee16f477aaacefac276b3f606dd10ddd4315784bffcadfa100f953d03 150240 owncloud_7.0.4+dfsg-4~deb8u3.debian.tar.xz 2d291ce3b914d374eecd443e1bc12f62c0999922b582f0de89369dc9fef2ffce 7537902 owncloud_7.0.4+dfsg-4~deb8u3_all.deb Files: 581bf069c45f3158511ee2e8286dbe4a 1755 web extra owncloud_7.0.4+dfsg-4~deb8u3.dsc 6016d0840f82c12b37c2ab59a514ca48 150240 web extra owncloud_7.0.4+dfsg-4~deb8u3.debian.tar.xz 94778990da18c56dee7f92f285101501 7537902 web extra owncloud_7.0.4+dfsg-4~deb8u3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJWEV4oAAoJEAWMHPlE9r08j3IH/jUs62tfDDb+fp/P4K9J5RnV ZoKcR6rq/ynze/t5A2PtpSrO32fL4LX7/mZ1/kobI6Zz0bRyhxaZ3C+RD0FHR2nN 964pYWr2m4Ptn/INi/KuSwm4vMFwW4+1w7pmfJw96PxtPq6MLo8iqZ3yfJqNOPPQ oHK1uO8duDCwPVrkvpGRkjI2orP4EO6atPfD1W874fp7YqHB03LgBodZ8k5LWS/s y8D9z1fmRG/LThgDdQeo1CGNiV5k+odZstx/ftSBu3pXKxxdB8j+UUTQoI0oHTgW rJRUe2PXpEDEQgPrR7MjiAA/6rwHr+o5FUHkGWWjV3xodHa0ymX3fY4od9E1c0g= =Iup3 -----END PGP SIGNATURE-----
