[Pkg-owncloud-maintainers] Bug#699441: owncloud: Multiple security issues in owncloud

John Goerzen jgoerzen at complete.org
Thu Jan 31 13:25:38 UTC 2013


Package: owncloud
Version: 4.0.4debian2-3.2
Severity: grave
Tags: security
Justification: user security hole

The version of owncloud in both testing and unstable contains security
holes.

http://owncloud.org/changelog/ has details.  Upstream versions 4.0.11
and 4.5.6 fixed:

 * Security: Fix multiple XSS problems: CVE-2013-0201, CVE-2013-0202, CVE-2013-0203
 * Security: Removed remoteStorage app because of unfixed security problems.

-- John

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash



More information about the Pkg-owncloud-maintainers mailing list