Date: Fri, 19 Apr 2013 18:53:30 +0200 (CEST) From: Loic Blot <root@unix-experience.fr> To: FreeBSD-gnats-submit@freebsd.org Subject: ports/177979: Owncloud: Two critical security updates and urgent fixes Message-ID: <201304191653.r3JGrUsC079583@unix-experience.fr> Resent-Message-ID: <201304191750.r3JHo2tU083296@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 177979 >Category: ports >Synopsis: Owncloud: Two critical security updates and urgent fixes >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Fri Apr 19 17:50:02 UTC 2013 >Closed-Date: >Last-Modified: >Originator: Loic Blot >Release: FreeBSD 9.1-RELEASE amd64 >Organization: Centre National de la Recherche Scientifique >Environment: System: FreeBSD www.unix-experience.fr 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4 09:23:10 UTC 2012 root@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64 >Description: Two critical security fixes for owncloud: * XSS problem in a flash file * A very importante security update (Authentification bypass on calendars) >How-To-Repeat: >Fix: --- port.diff begins here --- --- Makefile.old 2013-04-19 18:13:07.000000000 +0200 +++ Makefile 2013-04-19 18:21:13.000000000 +0200 @@ -1,7 +1,7 @@ # $FreeBSD: www/owncloud/Makefile 315922 2013-04-17 01:57:56Z kevlo $ PORTNAME= owncloud -PORTVERSION= 5.0.4 +PORTVERSION= 5.0.5 CATEGORIES= www MASTER_SITES= http://download.owncloud.org/community/ --- distinfo.old 2013-04-19 18:13:11.000000000 +0200 +++ distinfo 2013-04-19 18:24:25.000000000 +0200 @@ -1,2 +1,2 @@ -SHA256 (owncloud-5.0.4.tar.bz2) = fa6c93631368afe5b475e3173130b60be5f4f1166cd5d6f7993d242ac448f0d4 -SIZE (owncloud-5.0.4.tar.bz2) = 13878837 +SHA256 (owncloud-5.0.5.tar.bz2) = d1538f598f7b06a2d0494a9675a461e4bcd976e7e4ddf372efc1a2ec50007a31 +SIZE (owncloud-5.0.5.tar.bz2) = 13865933 --- port.diff ends here --- >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201304191653.r3JGrUsC079583>