This was fixed in the recently uploaded version 4.0.1debian-2 of the package.
** Changed in: owncloud (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/996185 Title: Weak password reset token & code exec in ownCloud 3.0.0 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/owncloud/+bug/996185/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs