[Pkg-owncloud-maintainers] Bug#703094: Bug#703094: owncloud: multiple vulnerabilities (oC-SA-2013-009, oC-SA-2013-010)

Prach Pongpanich prachpub at gmail.com
Sat Mar 16 04:55:13 UTC 2013


Hi Gregor,

On Sat, Mar 16, 2013 at 4:25 AM, gregor herrmann <gregoa at debian.org> wrote:
> Control: tag -1 + patch
>
> On Fri, 15 Mar 2013 09:27:32 +0100, Salvatore Bonaccorso wrote:
>
>> the following vulnerabilities were published for owncloud.
>>
>> CVE-2013-1851[0]:
>> user_migrate: Local file disclosure
>>
>> CVE-2013-1850[1]:
>> Contacts: Bypass of file blacklist
>
> I've now taken the commits mentioned in the upstream oC-SAs and put
> them into debian/patches. Diff attached.

You are quick response. :-)

 Regrads,

-- 
 Prach Pongpanich



More information about the Pkg-owncloud-maintainers mailing list