Hey John
On Thu, Jan 31, 2013 at 08:39:42AM -0600, John Goerzen wrote:
> Ah, sorry for the noise. 698737 did not show up on
> bugs.debian.org/owncloud and I didn't think to check the src:.
No problem. I'm unsure if I should have reported this against
owncloude instead src:owncloud. But security-
Ah, sorry for the noise. 698737 did not show up on
bugs.debian.org/owncloud and I didn't think to check the src:.
-- John
On 01/31/2013 08:37 AM, Salvatore Bonaccorso wrote:
Control: merge 698737 699441
Hi John
On Thu, Jan 31, 2013 at 07:25:38AM -0600, John Goerzen wrote:
Package: owncloud
Control: merge 698737 699441
Hi John
On Thu, Jan 31, 2013 at 07:25:38AM -0600, John Goerzen wrote:
> Package: owncloud
> Version: 4.0.4debian2-3.2
> Severity: grave
> Tags: security
> Justification: user security hole
>
> The version of owncloud in both testing and unstable contains security
> h
Processing control commands:
> merge 698737 699441
Bug #698737 [src:owncloud] owncloud: Multiple XSS vulnerabilities
(oC-SA-2013-001)
Unable to merge bugs because:
package of #699441 is 'owncloud' not 'src:owncloud'
Failed to merge 698737: Did not alter merged bugs
Debbugs::Control::set_m
Package: owncloud
Version: 4.0.4debian2-3.2
Severity: grave
Tags: security
Justification: user security hole
The version of owncloud in both testing and unstable contains security
holes.
http://owncloud.org/changelog/ has details. Upstream versions 4.0.11
and 4.5.6 fixed:
* Security: Fix multi
5 matches
Mail list logo