--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2016-2b26e78b1e
2016-01-31 23:00:15.390723
--------------------------------------------------------------------------------
Name : owncloud
Product : Fedora EPEL 6
Version : 7.0.12
Release : 1.el6
URL :
http://owncloud.org
Summary : Private file sync and share server
Description :
ownCloud gives you universal access to your files through a web interface or
WebDAV. It also provides a platform to easily view & sync your contacts,
calendars and bookmarks across all your devices and enables basic editing right
on the web. ownCloud is extendable via a simple but powerful API for
applications and plugins.
--------------------------------------------------------------------------------
Update Information:
This update provides the new upstream patch release of ownCloud (7.0.12 for EPEL
6, 8.0.10 for all other distributions). It also adds a 'well-known' redirect for
WebDAV (alongside the existing ones for CalDAV and CardDAV) - if you don't know
what this is, don't worry. These are bugfix updates which include fixes for some
security vulnerabilities rated 'low' and 'medium' by upstream. For full
details
on the changes, see the [upstream
changelog](https://www.owncloud.org/changelog)
and the security advisories: [OC-
SA-2016-001](https://owncloud.org/security/advisory/?id=oc-sa-2016-001), [OC-
SA-2016-002](https://owncloud.org/security/advisory/?id=oc-sa-2016-002), [OC-
SA-2016-003](https://owncloud.org/security/advisory/?id=oc-sa-2016-003), [OC-
SA-2016-004](https://owncloud.org/security/advisory/?id=oc-sa-2016-004).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1297353 - CVE-2016-1498 owncloud: reflected XSS in OCS provider discovery
[epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1297353
[ 2 ] Bug #1297359 - CVE-2016-1500 owncloud: disclosure of files that begin with
".v" due to unchecked return value [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1297359
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update owncloud' at the command line.
For more information, refer to "Managing Software with yum",
available at
https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------