Changelog for
owncloud-3rdparty-4.0.16-1.1.noarch.rpm :
Thu Jun 6 14:00:00 2013 freitagAATTowncloud.com
* Release \"4.0.16\" June 06, 2013
- SECURITY: Multiple XSS vulnerabilities (oC-SA-2013-028)
Tue May 14 14:00:00 2013 freitagAATTowncloud.com
- Removed bogus link file.
Tue May 14 14:00:00 2013 freitagAATTowncloud.com
Release \"4.0.15\" May 14. 2013
- SECURITY: Multiple directory traversals (oC-SA-2013-020)
- SECURITY: Multiple XSS vulnerabilities (oC-SA-2013-021)
Thu Apr 11 14:00:00 2013 danimoAATTowncloud.com
* Release \"4.0.14\" Apr 11, 2013
- XSS vulnerability in jPlayer (oC-SA-2013-014)
- PostgreSQL: Insecure database password generator (oC-SA-2013-015)
- Windows: Local file disclosure (oC-SA-2013-016)
Thu Mar 14 13:00:00 2013 freitagAATTowncloud.com
* Release 4.0.13 Mar 14, 2013
- Contacts: Bypass of file blacklist (oC-SA-2013-009)
- user_migrate: Local file disclosure (oC-SA-2013-010)
Tue Feb 19 13:00:00 2013 freitagAATTowncloud.com
* Release 4.0.12 Feb 19, 2013
- Multiple XSS vulnerabilities (oC-SA-2013-003)
- Multiple CSRF vulnerabilities (oC-SA-2013-004)
- Multiple code executions (oC-SA-2013-006)
Tue Jan 22 13:00:00 2013 freitagAATTowncloud.com
* Release \"4.0.11\" Jan 22. 2013
- Security: Fix multiple XSS problems: CVE-2013-0201, CVE-2013-0202, CVE-2013-0203
- Security: Removed remoteStorage app because of unfixed security problems.-
Thu Dec 20 13:00:00 2012 freitagAATTowncloud.com
* Release 4.0.10 Dec 20, 2012
- Security: Auth bypass in user_webdavauth and user_ldap (oC-SA-2012-006)
- Security: XSS vulnerability in bookmarks (oC-SA-2012-007)
Wed Nov 14 13:00:00 2012 freitagAATTowncloud.com
* Release 4.0.9 Nov 14, 2012
- Several critical security fixes
- Multiple XSS vulnerabilities (oC-SA-2012-001)
- Timing attack in the \"Lost Password\" implementation (oC-SA-2012-002)
- Code Execution in /lib/migrate.php (oC-SA-2012-004)
- Code Execution in /lib/filesystem.php (oC-SA-2012-005)
Wed Oct 10 14:00:00 2012 freitagAATTowncloud.com
* Release 4.0.8 Oct 10, 2012
- Show Login Button when user and password are autocompleted
- Sanitize LDAP base, user and groups
- Security: Fix for insufficiently Random Values (CVE-2008-4107)
- Security: Fixed multiple XSS vulnerabilities (CVE-2012-5056)
- Security: Fixed a HTTP header injection (CVE-2012-5057)
- Security: Fixed an Auth bypass in /lib/base.php (CVE-2012-5336)
Wed Aug 15 14:00:00 2012 freitagAATTowncloud.com
* Release 4.0.7 Aug 15, 2012
- Show Login Button when user and password are autocompleted
- Sanitize LDAP base, user and groups
- Fix non active Adressbooks
- Calendar: Remove double html encoding
- Fix label for versioning in admin settings
- Add parent directory into filecache if it doesn´t exist
- Handle non writable files correctly
- Disable webfinger completely if not activated
- Security: Disable user listings in DAV
- Check file blacklist for file renames
- Security: Fix XSS bug in Gallery
- Security: Several CSRF security fixes
- Security: Validate cookie to prevent auth bypasses
Special thanks to Julien Cayssol for reporting several security problems
Tue Jul 31 14:00:00 2012 freitagAATTowncloud.com
* Release \"4.0.6\" Aug 1. 2012
- More robust LDAP integration during unexpected collisions
- Fix sharing for users with AATT in username
- Additional error handling for emailing of private links
- Cleanup old session files
- Fix user space calculation
- Fix Ampache authentication
- Remove delete tipsy if file is deleted
- Dont delete lots of session files during DAV requests
- Fix error when no adressbook is created
- Check if php-ldap is installed
- Security: Check for Admin user in appcinfig.php
- Security: Several CSRF security fixes
Thu Jul 19 14:00:00 2012 freitagAATTowncloud.com
- Release \"4.0.5\"
July 20. 2012
* Fix remember the username and autologin
* Offer an option to allow sharing outside the group.
* Fix for birthday format
* Fixes for several encoding fixes for unicode characters
* Fix invalid filesystem cache in the sharing folder
* Several calendar and contacs fixes
* Fix sending of emails
* Several fixes in the system log
* Several fixes for the external filesystem feature
* Several CSRF security fixes
Wed Jun 27 14:00:00 2012 freitagAATTowncloud.com
- Release \"4.0.4\"
June 28. 2012
* Fix assigning several groups to a user.
* Fix LDAP connector with AD servers
* Conserve some memory in Contacts App
* Fix a warning in Gallery when deleting files
* Fix a bug in the music scanner
Fri Jun 22 14:00:00 2012 freitagAATTowncloud.com
- update to version ownCloud community server 4.0.3
June 23. 2012
* Added a check if the .htaccess file is working and the data directory is protected or not.
* Added a check if a user is alowed to edit a bookmark or not.
* Fix the bookmarklet
* Fix the timezone in the datepicker
* Fix mimetype detection for cdr files
* Fix the filecache for the /Shared folder
* Fix a potential data corruption bug in the encryption app
* Don\'t show other users filenames during filesystem cache rebuild
* Fix several XSS bugs
* Performance improvements for WebDAV and Desktop Syncing
* Fix quota calculation
* Improve the LDAP integration and group management
* Fix problems with the pdf viewer
* Fix user account migration
* Implement several CSRF security checks
* Fix a gallery bug where first picture is repeated in the last picture.
* Lot\'s of calendar fixes
* Fix problem with \"/\" in filenames
* Updated translations
* Several fixes in Contacts
* Lot\'s of fixes in the Tasks App
Mon Jun 11 14:00:00 2012 freitagAATTowncloud.com
- update to version ownCloud community server 4.0.2
* Lot´s of gallery fixes
* More 3rd party apps visible
* Fixed update notifications
* Several calendar fixes
* Several XSS fixes in calendar
* Several improvements in contacts
* Fix infinite redirect during setup for windows hosts
* Several XSS fixes in contacts
* New user password salting
* Several LDAP fixes
* Fix doublicate emails in sharing
* Improved compatibility with Android browser
* Fixed calendar links
* Fixed logging
* Allow “/” in filenames
* Updated translations
* Fixed reverse proxy and custom hosts configuration
* Fix contact photo editing
* Dont allow renaming, deleting and resharing of shared folder
Mon Jun 4 14:00:00 2012 freitagAATTowncloud.com
- update to version ownCloud community server 4.0.1
* Verify if user exists when loggin (oc-863)
* More efficient log file handling
* PDO requirement check
* Check if apps folder is writable
* prevent division by zero problem during output of free space
* better mysql error message
* correctly configure ldap group backend (oc-887)
* sort users and groups (oc-779)
* LDAP. correctly handle group filter (oc-867)
* try to switch magic quotes of globally
* fix ategory error reporting (oc-874)
* correctly handle reverse proxy / load balancer https handling
* prevent session already started warning
* fix the files breadcrumb
* don\'t try to use smtp auth if config files says no
* fix versioning path
* security: fix a XSS problem in calendar
* make LDAP pqsql compatible
* fix pqsql database migration
* fix ldap config interface
* support for LDAP \"member\"
* don\'t hardcode /tmp
* fix potential security problem for requested apps parameter
* fix notes in contacts properly
* fix timezone detection
* fix interti_id in calendar
* set DB prefix for pqsql
* security: fix a XSS problem in contacts
* correctly encode caldav link
* allow longer path in gallery
* disable not compatible apps during upgrade
* fix HEAD request for downloads
* fix private link sharing via email
* use UTC as default timezone
* style fixes for tasks app
Mon May 21 14:00:00 2012 freitagAATTowncloud.com
- update to version ownCloud community server 4.0.0
* versioning of files
* server side encryption
* drag and drop upload
* theming
* ODF file viewer
* ownCloud Application APIs
* migration adn backup
* tasks management
* application store
* lots of improvements
Wed Apr 11 14:00:00 2012 freitagAATTopensuse.org
- adopted Markus\' latest changes for Fedora 16
Wed Apr 11 14:00:00 2012 freitagAATTopensuse.org
- created new community version packages from the enterprise branch.
New upstream version 3.0.2, release april 11, 2012:
- Drag and Drop fixed
- Fixed Sharing for LDAP Users
- Fix loading of LDAP Plugin
- Security: Make password hashes more random
- Security: Fix a XXS problem
- Several small bugfixes
Wed Apr 11 14:00:00 2012 msrexAATTowncloud.com
- update to ownCloud 2012.0.1
Wed Apr 11 14:00:00 2012 msrexAATTowncloud.com
- update to ownCloud 2012.0.1
Thu Apr 5 14:00:00 2012 msrexAATTowncloud.com
- fix fedora permissions
- detect selinux on redhat platforms and add permissions for owncloud
Thu Apr 5 14:00:00 2012 msrexAATTowncloud.com
- repair previously messed-up non-suse-platforms dependencies
Tue Apr 3 14:00:00 2012 msrexAATTowncloud.com
- change dependencies for some non-suse-platforms
Sun Apr 1 14:00:00 2012 msrexAATTowncloud.com
- no more fdupes for now for anybody
Sun Apr 1 14:00:00 2012 msrexAATTowncloud.com
- remove fdupes requirement for non-suse packages
Sun Apr 1 14:00:00 2012 msrexAATTowncloud.com
- update to final ownCloud 2012 enterprise packaging
- updated descriptions
Sun Apr 1 14:00:00 2012 msrexAATTowncloud.com
- make specfile work with both redhat and suse-based systems
- update to current ownCloud stable branch
Sun Apr 1 14:00:00 2012 freitagAATTopensuse.org
- autostart ntp at server installation.
Thu Feb 2 13:00:00 2012 asemenAATTsuse.de
- Fix apache2 start error, missconfig in owncloud.conf
Thu Feb 2 13:00:00 2012 tomAATTopensuse.org
- Upstream version 3.0:
- Cloud Text Editing
- Application Store
- Photo Gallery
- Fixed permissions (bnc#736764)
- added apache config to prevent php execution in upload dir
Thu Oct 20 14:00:00 2011 jnelson-suseAATTjamponi.net
- Upstream version 2.0
Wed Sep 28 14:00:00 2011 wstephensonAATTsuse.com
- Upstream version 2.0 beta2
- Fixes to user creation and LDAP integration
- Reset package version number to 1.9.1 to allow clean upgrades
Mon Sep 26 14:00:00 2011 asemenAATTsuse.de
- upstream beta 1 Version 2.0
Mon Sep 19 14:00:00 2011 asemenAATTsuse.de
- update from upstream some fixes in calender
Fri Sep 16 14:00:00 2011 freitagAATTsuse.com
- added a missing dependency php5-mbstring
fixed some rpmlint warnings
Thu Sep 15 14:00:00 2011 asemenAATTsuse.de
- upstream upgrade to version ownCloud 2.0
Wed Jun 8 14:00:00 2011 asemenAATTsuse.de
- upstream upgrade to version ownCloud 1.2
Mon Jan 24 13:00:00 2011 asemenAATTsuse.de
- optimizing build spec file
Wed Jan 19 13:00:00 2011 asemenAATTsuse.de
- initial build for php:applications project
Tue Nov 2 13:00:00 2010 asemenAATTsuse.de
- upstream upgrade to version ownCloud 1.1
Changes
* Plugin system
* User management
* ownCloud can now be installed in a DB shared with other applications since ownCloud tables has a prefix (default is \"oc_\" but can choose it)
* Experimental PostgreSQL support
* Text viewer with syntax highlighting
* Fixes, fixes, fixes...
* Code cleanup
Mon Oct 25 14:00:00 2010 asemenAATTsuse.de
- rebuild with ownCloud 1.0 rc1
Mon Oct 25 14:00:00 2010 asemenAATTsuse.de
- initial build of ownCloud 1.0
