Hello,<div><br></div><div>I'll take a look.</div><div><br></div><div>Do you need that specific version of jPlayer for OwnCloud or would it be OK to upload the latest version, which I guess includes the fix already?</div>

<div><br><br><div class="gmail_quote">On Thu, Apr 11, 2013 at 8:10 PM, David Prévot <span dir="ltr"><<a href="mailto:david@tilapin.org" target="_blank">david@tilapin.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA256<br>
<br>
Hi,<br>
<br>
Le 10/04/2013 22:58, David Prévot a écrit :<br>
> Le 10/04/2013 15:28, David Prévot a écrit :<br>
><br>
>> At first, we could upload 4.0.14 to Sid, hopefully it won’t be too messy.<br>
><br>
> 4.0 branch created on Git, and package prepared. Binary packages<br>
> available on people.d.o for testers’ convenience:<br>
><br>
>       <a href="http://people.debian.org/~taffit/owncloud/" target="_blank">http://people.debian.org/~taffit/owncloud/</a><br>
><br>
> I should be able to test it tomorrow or the day after, and then upload<br>
<br>
The security issue is actually in libjs-jquery-jplayer, so I won’t<br>
upload anything in a hurry.<br>
<br>
        <a href="http://owncloud.org/about/security/advisories/oC-SA-2013-014/" target="_blank">http://owncloud.org/about/security/advisories/oC-SA-2013-014/</a><br>
        <a href="https://security-tracker.debian.org/tracker/CVE-2013-1942" target="_blank">https://security-tracker.debian.org/tracker/CVE-2013-1942</a><br>
<br>
The new jquery-jplayer version FTBFS, I hope Pau (CC) will manage to<br>
backport the security fix in a timely manner.<br>
<br>
Regards<br>
<br>
David<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.12 (GNU/Linux)<br>
<br>
iQIcBAEBCAAGBQJRZvx9AAoJELgqIXr9/gny3XoP/1fCKjPqk7sGLf+Rsc2lVCUJ<br>
rQ6EPSqlOSXBuWpu46s4NxF/sibTNXCEtLtmm+QV1TyDBJfwzC1l83bMjKLrCA2D<br>
g8VsIEfA21iEOrrbL8Kh4FvfyRk2mF6beSZOdAnh73TeJeT9nagT24fF/i7izF5r<br>
/7Z/cUg3MZK6j4fj2MZoqhdpwOdXyFMyVQXGqmxRvGDWk6ddZah3dtcMWKkUgrbI<br>
hxAU6GzPXkZ6JXpuVYNRg9U6fr5VKeRztqZt+iRjAzUDHNwHqCENUY38ktl08qXf<br>
+HAHNrkxFEEJu3cvGViRxXoe/qZTcLLf9C9fiYAoFGJprmiCamPC7PEZ3Zg3PqbG<br>
8r7MUOqxkh26Dt2gxwo64YlmoXygnWZdqAie6kF4BR/Zqu6fGHyD4k27VxmpYrbx<br>
wZNl8zror9SdmO6y5qJ+WbZ/I2lyrDRj/XtYgLV3+sI1Byz5iyLpT7dSbajkayMv<br>
L3Ar5H5CXks0a4orbnuUfX12hDDoPjgHGtnXGYd20UbBC8fI7yFngSu1ni/CVYZv<br>
TeyXsmEu34Tk+NlJkT8KTi1PwOp7eqPmDlo8pyOisehk8Ftz3LDYcLvua1H5RtPP<br>
lhsvbtX4FcXW4IOoRuMD+NmvdDX8VPjtMnXTnlvln/Jvb0jAa/YGDK9PsYLuLLw3<br>
rfBiTMyxD5kFLtNYkSR/<br>
=zUtN<br>
-----END PGP SIGNATURE-----<br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Pau Garcia i Quiles<br><a href="http://www.elpauer.org">http://www.elpauer.org</a><br>(Due to my workload, I may need 10 days to answer)
</div>