ports/177979: Owncloud: Two critical security updates and urgent fixes
Loic Blot
root at unix-experience.fr
Fri Apr 19 17:50:03 UTC 2013
>Number: 177979
>Category: ports
>Synopsis: Owncloud: Two critical security updates and urgent fixes
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Fri Apr 19 17:50:02 UTC 2013
>Closed-Date:
>Last-Modified:
>Originator: Loic Blot
>Release: FreeBSD 9.1-RELEASE amd64
>Organization:
Centre National de la Recherche Scientifique
>Environment:
System: FreeBSD www.unix-experience.fr 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4 09:23:10 UTC 2012 root at farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64
>Description:
Two critical security fixes for owncloud:
* XSS problem in a flash file
* A very importante security update (Authentification bypass on calendars)
>How-To-Repeat:
>Fix:
--- port.diff begins here ---
--- Makefile.old 2013-04-19 18:13:07.000000000 +0200
+++ Makefile 2013-04-19 18:21:13.000000000 +0200
@@ -1,7 +1,7 @@
# $FreeBSD: www/owncloud/Makefile 315922 2013-04-17 01:57:56Z kevlo $
PORTNAME= owncloud
-PORTVERSION= 5.0.4
+PORTVERSION= 5.0.5
CATEGORIES= www
MASTER_SITES= http://download.owncloud.org/community/
--- distinfo.old 2013-04-19 18:13:11.000000000 +0200
+++ distinfo 2013-04-19 18:24:25.000000000 +0200
@@ -1,2 +1,2 @@
-SHA256 (owncloud-5.0.4.tar.bz2) = fa6c93631368afe5b475e3173130b60be5f4f1166cd5d6f7993d242ac448f0d4
-SIZE (owncloud-5.0.4.tar.bz2) = 13878837
+SHA256 (owncloud-5.0.5.tar.bz2) = d1538f598f7b06a2d0494a9675a461e4bcd976e7e4ddf372efc1a2ec50007a31
+SIZE (owncloud-5.0.5.tar.bz2) = 13865933
--- port.diff ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list