Your message dated Sun, 03 Feb 2013 23:17:44 +0000 with message-id <e1u28oi-0000iv...@franck.debian.org> and subject line Bug#698737: fixed in owncloud 4.0.4debian2-3.3 has caused the Debian Bug report #698737, regarding owncloud: Multiple XSS vulnerabilities (oC-SA-2013-001) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 698737: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698737 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: owncloud Severity: grave Tags: security Hi The following announce on multiple XSS vulnerabilities in owncloud was done: [0] http://owncloud.org/about/security/advisories/oC-SA-2013-001/ If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [1] http://security-tracker.debian.org/tracker/CVE-2013-0201 [2] http://security-tracker.debian.org/tracker/CVE-2013-0202 [3] http://security-tracker.debian.org/tracker/CVE-2013-0203 Please adjust the affected versions in the BTS as needed, for the affected versions. Regards, Salvatore
--- End Message ---
--- Begin Message ---Source: owncloud Source-Version: 4.0.4debian2-3.3 We believe that the bug you reported is fixed in the latest version of owncloud, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 698...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <car...@debian.org> (supplier of updated owncloud package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 Feb 2013 23:52:13 +0100 Source: owncloud Binary: owncloud owncloud-mysql owncloud-sqlite Architecture: source all Version: 4.0.4debian2-3.3 Distribution: testing-proposed-updates Urgency: high Maintainer: ownCloud for Debian maintainers <pkg-owncloud-maintain...@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <car...@debian.org> Description: owncloud - cloud storage for files, music, contacts, calendars and many more owncloud-mysql - meta-package providing MySQL dependencies for ownCloud owncloud-sqlite - meta-package providing SQLite dependencies for ownCloud Closes: 698737 Changes: owncloud (4.0.4debian2-3.3) testing-proposed-updates; urgency=high . * Non-maintainer upload. * Add 12_oc-sa-2013-001.patch patch [SECURITY] CVE-2012-0201, CVE-2012-0202 and CVE-2012-0203: Fix multiple XSS vulnerabilities. (Closes: #698737) Checksums-Sha1: 9728c335e2a1890adfee36fd4b1ed1384e019585 2156 owncloud_4.0.4debian2-3.3.dsc 4170a3bfb6fa1b92cd2a598ed08b38bc038ff39d 49027 owncloud_4.0.4debian2-3.3.debian.tar.gz 67f9b14ca676f16fe6af88f3f120f84e864a5271 2212536 owncloud_4.0.4debian2-3.3_all.deb 6351529d26ea5fea2638adf05877b24e44b9e733 31514 owncloud-mysql_4.0.4debian2-3.3_all.deb c96ea03c8fb0575ae501e5c1125c17cc4a6fc2b2 57492 owncloud-sqlite_4.0.4debian2-3.3_all.deb Checksums-Sha256: 8b925c408b8446c0c19fed6c7cfcb13c198eb25edbc07a035d1d66834b1f6cd5 2156 owncloud_4.0.4debian2-3.3.dsc f1eb0a2b452213fd9210d79087084f6146c279d97a9396cf79180986db2da3cf 49027 owncloud_4.0.4debian2-3.3.debian.tar.gz cd35e16bb540e8066a1f8b42bc726ee9eae229c75d9fb0a83cea25d6933b232f 2212536 owncloud_4.0.4debian2-3.3_all.deb 6fb3e4892c1803e55967d4d24b5e0556b04e486e8b48b79b142c97d713199eac 31514 owncloud-mysql_4.0.4debian2-3.3_all.deb f323141937c9740fd00e24d1ad06ce830b29f44837e3018ecea54afd2b800026 57492 owncloud-sqlite_4.0.4debian2-3.3_all.deb Files: 4d056ec648cf48cae89018effd3d5f23 2156 web extra owncloud_4.0.4debian2-3.3.dsc dabca365073ae2598d315da9d76e0ef4 49027 web extra owncloud_4.0.4debian2-3.3.debian.tar.gz faaa22cdeeed65664837b3a04eb6dd5e 2212536 web extra owncloud_4.0.4debian2-3.3_all.deb f6285a45db8ef1ae4ce675fb724e8baf 31514 web extra owncloud-mysql_4.0.4debian2-3.3_all.deb ad7445bff489cdad6b3adf8f49bcf7ab 57492 web extra owncloud-sqlite_4.0.4debian2-3.3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCgAGBQJRDZnXAAoJEHidbwV/2GP+mVIQAMCLyCYrjVqWB7g6SPBS1mSq LlWgi2ifhETbkE4UU5znv44XaHs+mN7oBTqk5fWqAUeFQtkbqNzr1RAtJUy/px// R/86W3PYMrkeA7eb5rzYtvg+/3dGpK4z39lBPzz7TgoMK0hDiGZeRSreqSv6aQ8V oDq1nLBNj6mQA4It/6m7/jTVcu1f0xI6VxlmmSMcX2DzYATtaSFT6VK1EZNvFdoK dzgYXFtbGCfPo0sGkamQiEhweAXxrskgiAgyVAjp1IvmfXVZmC484VQHavDKLorQ nBnM+RW9xKQvhRRPKEJAxk1mMBCNWy5s/Tjs0hufLBND9bjVeeP+lWk1xhBMTbjv GnnJSjlgomvkqGzbKD1FDK4WtK3xu/04rxOxt8fuju4qOeWJI1HnGY0tl4vAi8ly ycedgJ9l6DeLPPqrpk5Iv6ymFnoxP0MtidnT4mP0jBrPcTtqfQgHaT0xyeiNa96j 3PODePr3ztPUn3O+WIt+3nkW8RJPCPAjITGKFa4n75Z1PIVFX5rkwhG4rCtAXjeU 2Jd7lxIAUfcB0gC7rXDTMu6gN6ievw7RrG+MCC/R5W0BiDJfeHLIQpU65wCPeBTJ ws2rlbjQs/ywK3xiUd8qhlewe7ZDRJlDFaW01gwWEdHgv8fhjl9UEJ7K5wqp1N7M PnqnTELsX1OvwFumSCMh =rydN -----END PGP SIGNATURE-----
--- End Message ---
