Changelog for
owncloud-unsupported-2012.4-9.2.noarch.rpm :
Tue May 14 14:00:00 2013 freitagAATTowncloud.com
* SECURITY: Multiple directory traversals (oC-SA-2013-020)
* SECURITY: Multiple XSS vulnerabilities (oC-SA-2013-021)
Thu Apr 11 14:00:00 2013 freitagAATTowncloud.com
Release of ownCloud 2012.4.0.14
* XSS vulnerability in jPlayer (oC-SA-2013-014)
* PostgreSQL: Insecure database password generator (oC-SA-2013-015)
* Windows: Local file disclosure (oC-SA-2013-016)
Tue Mar 12 13:00:00 2013 freitagAATTowncloud.com
Release of ownCloud 2012.4.0.13
* Contacts: Bypass of file blacklist (oC-SA-2013-009)
* user_migrate: Local file disclosure (oC-SA-2013-010)
Tue Feb 19 13:00:00 2013 freitagAATTowncloud.com
owncloud (2012.4.0.12-0) stable; urgency=low
* Multiple XSS vulnerabilities (oC-SA-2013-003)
* Multiple CSRF vulnerabilities (oC-SA-2013-004)
* Multiple code executions (oC-SA-2013-006)
Tue Jan 22 13:00:00 2013 freitagAATTowncloud.com
owncloud (2012.4.0.11-0) stable; urgency=low
* Security: Fix multiple XSS problems: CVE-2013-0201, CVE-2013-0202, CVE-2013-0203
* Security: Removed remoteStorage app because of unfixed security problems.
Thu Dec 20 13:00:00 2012 freitagAATTopensuse.org
- Release 2012.4.0.10
* Security: Auth bypass in user_webdavauth and user_ldap (oC-SA-2012-006)
* Security: XSS vulnerability in bookmarks (oC-SA-2012-007)
Wed Nov 14 13:00:00 2012 freitagAATTowncloud.com
- Release 2012.4.0.9
- Several critical security fixes
- Multiple XSS vulnerabilities (oC-SA-2012-001)
- Timing attack in the \"Lost Password\" implementation (oC-SA-2012-002)
- Code Execution in /lib/migrate.php (oC-SA-2012-004)
- Code Execution in /lib/filesystem.php (oC-SA-2012-005)
Wed Oct 10 14:00:00 2012 freitagAATTowncloud.com
- Release 2012.4.0.8 Oct 9. 2012
- Faster Syncing
- Sub Administrators
- GUI for mounting of external storage
- Improved File Versioning
- Enhanced Sharing
- Reworked LDAP
- Big File Chunking
Wed Aug 15 14:00:00 2012 freitagAATTowncloud.com
- update to ownCloud 2012.4.0.7
- Show Login Button when user and password are autocompleted
- Sanitize LDAP base, user and groups
- Fix non active Adressbooks
- Calendar: Remove double html encoding
- Fix label for versioning in admin settings
- Add parent directory into filecache if it doesn´t exist
- Handle non writable files correctly
- Disable webfinger completely if not activated
- Security: Disable user listings in DAV
- Check file blacklist for file renames
- Security: Fix XSS bug in Gallery
- Security: Several CSRF security fixes
- Security: Validate cookie to prevent auth bypasses
Special thanks to Julien Cayssol for reporting several security problems
Tue Jul 31 14:00:00 2012 freitagAATTowncloud.com
- update to ownCloud 2012.4.0.6
Thu Jul 19 14:00:00 2012 freitagAATTowncloud.com
- update to ownCloud 2012.4.0.5
Wed Jun 27 14:00:00 2012 freitagAATTowncloud.com
- update to ownCloud 2012.0.4
Sat Apr 28 14:00:00 2012 msrexAATTowncloud.com
- update to ownCloud 2012.0.3 with security fixes
Wed Apr 18 14:00:00 2012 msrexAATTowncloud.com
- changed compat level to allow Ubuntu 10.04 LTS to build
Tue Apr 17 14:00:00 2012 msrexAATTowncloud.com
- added debian / ubuntu packaging support
Wed Apr 11 14:00:00 2012 msrexAATTowncloud.com
- update to ownCloud 2012.0.1
Tue Apr 3 14:00:00 2012 msrexAATTowncloud.com
- change required packages
Mon Apr 2 14:00:00 2012 freitagAATTopensuse.org
- updated to release tarball MD5 9ff833f510fb180b0288129bd7cfab5e
Sun Apr 1 14:00:00 2012 msrexAATTowncloud.com
- initial build