[Pkg-owncloud-commits] [owncloud] 02/02: Update changelog for 7.0.4+dfsg-4~deb8u2 release

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to branch jessie
in repository owncloud.

commit 6bc71792fcac6f24c4da4589d08e8bcaf6829c01
Author: David Prévot <taffit at debian.org>
Date:   Thu Sep 3 19:39:34 2015 -0400

    Update changelog for 7.0.4+dfsg-4~deb8u2 release
---
 debian/changelog | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index fe8558d..503bd03 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,17 @@
+owncloud (7.0.4+dfsg-4~deb8u2) jessie; urgency=medium
+
+  * Backport security fixes from 7.0.6 and 7.0.8:
+    - Local file inclusion on MS Windows Platform
+      [OC-SA-2015-006] [CVE-2015-4716]
+    - Resource exhaustion when sanitizing filenames
+      [OC-SA-2015-007] [CVE-2015-4717]
+    - Command injection when using external SMB storage
+      [OC-SA-2015-008] [CVE-2015-4718]
+    - Calendar export: Authorization Bypass Through User-Controlled Key
+      [OC-SA-2015-015] [CVE-2015-6670]
+
+ -- David Prévot <taffit at debian.org>  Thu, 03 Sep 2015 19:38:32 -0400
+
 owncloud (7.0.4+dfsg-4~deb8u1) jessie-security; urgency=medium
 
   * Upload to jessie-security as agreed with the security team

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git