[Pkg-owncloud-maintainers] Bug#688123: owncloud: CVE-2012-4753

Moritz Muehlenhoff jmm at inutil.org
Wed Sep 19 15:32:14 UTC 2012


Package: owncloud
Severity: grave
Tags: security
Justification: user security hole

Hi,
CVE-2012-4753 is still unfixed in Wheezy:
http://www.openwall.com/lists/oss-security/2012/09/05/17

It's not clear, which CSRF fixes were fixed in 4.0.5, so please
contact upstream to identify the specific fixes and introduce 
them in another tpu upload.

Cheers,
        Moritz



More information about the Pkg-owncloud-maintainers mailing list