Changelog for
owncloud-unsupported-2012.4-30.1.noarch.rpm :
* Wed Jul 10 2013 freitagAATTowncloud.com
* SECURITY: Authentication bypass in \"user_webdavauth\" (oC-SA-2013-030)
* Fixed deleting old files versions
* Thu Jun 06 2013 freitagAATTowncloud.com- update to ownCluod enterprise 4.5.12
* SECURITY: Multiple XSS vulnerabilities (oC-SA-2013-028)
* Several Contacts fixes
* Several Calendar fixes
* Several smaller fixes
* Fri Apr 19 2013 danimoAATTowncloud.com- update to ownCloud enterprise 4.5.10
* Security: XSS in flashmediaelement.swf
* Security: Authentication bypass in calendar
* Thu Apr 11 2013 freitagAATTowncloud.com- update to ownCloud enterprise 4.5.9
* Fix public sharing
* Improved LDAP error reporting
* Don\'t show share action for Shared folder
* XSS vulnerability in jPlayer (oC-SA-2013-014)
* PostgreSQL: Insecure database password generator (oC-SA-2013-015)
* Windows: Local file disclosure (oC-SA-2013-016)
* Tue Mar 12 2013 freitagAATTowncloud.com- update to ownCloud enterprise 4.5.8
* Fix foldersize checks to validate zip input size
* Offer download of shared dir as zip only if zip size limit is not exceeded
* Escape more characters for LDAP search
* fix versioning together with real home directories
* Multiple XSS vulnerabilities (oC-SA-2013-008)
* Contacts: Bypass of file blacklist (oC-SA-2013-009)
* user_migrate: Local file disclosure (oC-SA-2013-010)
* Tue Feb 19 2013 freitagAATTowncloud.com
* Fix for 3rd party apps dropping the database
* Fix SubAdmins management
* Fix PHP warnings
* Fix compatibility with some CIFS shares
* More robust apps management
* Remove not needed AWS tests
* Improved mime type parsing
* Several sharing fixes
* Offer the option to change he password only supported by he backend
* More robust auto language detection
* Revoke DB rights on install only if the db is newly created
* Fix rendering of database connection error page
* LDAP: update quota more often
* Multiple XSS vulnerabilities (oC-SA-2013-003)
* Multiple CSRF vulnerabilities (oC-SA-2013-004)
* PHP settings disclosure (oC-SA-2013-005)
* Multiple code executions (oC-SA-2013-006)
* Privilege escalation in the calendar application (oC-SA-2013-007)
* Tue Jan 22 2013 freitagAATTowncloud.com- owncloud (2012.4.5.6-0) stable; urgency=low
* Improved language detection
* Improved translations
* Fix link to bugtracker
* Several IE 6/7/8 fixes
* SabreDAV updated to 1.6.6
* Improved error reporting
* Support special characters in mountpoint
* Interpret http 403 and 401 as not authorized in user_webdavauth
* Several fixes for special characters in files and folders
* Improved PostgreSQL support
* Check database names for valid characters
* Fix default email address calculation
* Remove debug output on send password page
* Add SMTP port configuration option
* Only show the max possible upload of 2GB on a 32 bit system
* Show progress during file downloads
* Security: Fix multiple XSS problems: CVE-2013-0201, CVE-2013-0202, CVE-2013-0203
* Security: Fix Code execution in external storage: CVE-2013-0204
* Security: Removed remoteStorage app because of unfixed security problems.
* Thu Dec 20 2012 freitagAATTopensuse.org- Release 2012.4.5.5-0
* Show drag and drop shadow for Firefox
* Fix Knowledgebase under certain conditions
* Fix setting of sharing password
* Fix setting of sharing password
* Several sharing fixes
* Fix versioning during sharing
* Fix mounting of external filesystems especially CIFS
* Fix several PHP warnings
* Show /Shared as standard directory
* Fix session management for running several ownClouds on the same host
* Fix WebDAV quota enforement
* Fix CalDAV with LDAP users
* Better warning about missing dependencies
* Add warning about conflicting WebDAV auth and LDAP backend
* Restore send sharing link my email
* Fix encoding problem with mounting of CIFS filesystems
* Fix mimetype icons for new files
* Fix the folder size calculation
* Fix for deleting multiple files
* Fix for controling the data dir with LDAP
* Security: Auth bypass in user_webdavauth and user_ldap (oC-SA-2012-006)
* Security: XSS vulnerability in bookmarks (oC-SA-2012-007)
* Sun Dec 02 2012 freitagAATTowncloud.com- Release 2012.4.5.4-0
* Fix a regression for system where output buffering is disabled
* Fix a problem with old file versions stored in the filesystem cache
* Fix group and subadmin ajax bug
* Important LDAP fix
* Improved Updater
* Tue Nov 27 2012 freitagAATTowncloud.com- Release 2012.4.5.3
* Fix the new from url button
* Fix a memory overflow with downloading of big files via WebDAV
* Better error output in case of DB problems
* Fix problems with uploading files who have special characters in the name
* Improved reverse proxy and load balancer support
* Fix wrong folder size calculation
* Improved share link generation
* Fix the syncing of the Shared folder
* Fix Sharing by link from within Shared folder
* Several LDAP integration fixes
* Fix support for PostgreSQL
* Several WebDAV fixes
* Fix drag and drop uploading
* Improved translations
* Smaller fixes
* Wed Nov 14 2012 freitagAATTowncloud.com- Release 4.5.2 Nov 14, 2012
* Fix syncing of shared folder
* Various sharing bugs fixed
* Fix bug with deleting users
* Fix check if resharing is allowed
* Fix webdavauth app
* Several ldap fixes
* Fix data migration
* Fix folder uploads
* Fix generatino of etags
* fix user specific mount configuration
* Several PostgreSQL fixes
* Improved performance of file updates
* Fix some php warnings
* Fix filesize calculation
* add visual feedback if password is set
* Various smaller fixes
* Several critical security fixes
* XSS vulnerability in user_webdavauth (oC-SA-2012-003)
* Code Execution in /lib/migrate.php (oC-SA-2012-004)
* Code Execution in /lib/filesystem.php (oC-SA-2012-005)
* Thu Oct 25 2012 freitagAATTowncloud.com
* Release 4.5.1 Oct 24. 2012
* Fix path encoding in breadcrumb
* Fix sharing of files with special characters
* Fix upercase/lowercase probelm in usernames with WebDAV
* Fix LDAP plugin with Postgres
* Fix userID migration
* Fix sharing of mounted Files
* Delete userfiles after deleting a user
* Make Webinterface work with nonstandard path
* Fix retieval of Quota, Email via LDAP
* Show a warning in installer if .htaccess is not working
* Fix Shared folder caching
* Increase security by using openssl random number generator
* Fix syncing of rollback files
* Fix the swift files backend
* Disallow user to delete own account
* Security: Fix multiple XSS vulnerabilities (oC-SA-2012-001)
* Security: Fix a timing attack in the \"Lost Password\" implementation (oC-SA-2012-002)
* Various other smaller fixes
* Wed Oct 10 2012 freitagAATTowncloud.com
* Release 4.5.0 Oct 9. 2012 - Faster Syncing - Sub Administrators - GUI for mounting of external storage - Improved File Versioning - Enhanced Sharing - Reworked LDAP - Big File Chunking
* Wed Aug 15 2012 freitagAATTowncloud.com- update to ownCloud 2012.4.0.7- Show Login Button when user and password are autocompleted- Sanitize LDAP base, user and groups- Fix non active Adressbooks- Calendar: Remove double html encoding- Fix label for versioning in admin settings- Add parent directory into filecache if it doesn´t exist- Handle non writable files correctly- Disable webfinger completely if not activated- Security: Disable user listings in DAV- Check file blacklist for file renames- Security: Fix XSS bug in Gallery- Security: Several CSRF security fixes- Security: Validate cookie to prevent auth bypasses Special thanks to Julien Cayssol for reporting several security problems
* Tue Jul 31 2012 freitagAATTowncloud.com- update to ownCloud 2012.4.0.6
* Thu Jul 19 2012 freitagAATTowncloud.com- update to ownCloud 2012.4.0.5
* Wed Jun 27 2012 freitagAATTowncloud.com- update to ownCloud 2012.0.4
* Sat Apr 28 2012 msrexAATTowncloud.com- update to ownCloud 2012.0.3 with security fixes
* Wed Apr 18 2012 msrexAATTowncloud.com- changed compat level to allow Ubuntu 10.04 LTS to build
* Tue Apr 17 2012 msrexAATTowncloud.com- added debian / ubuntu packaging support
* Wed Apr 11 2012 msrexAATTowncloud.com- update to ownCloud 2012.0.1
* Tue Apr 03 2012 msrexAATTowncloud.com- change required packages
* Mon Apr 02 2012 freitagAATTopensuse.org- updated to release tarball MD5 9ff833f510fb180b0288129bd7cfab5e
* Sun Apr 01 2012 msrexAATTowncloud.com- initial build