[Pkg-owncloud-commits] [owncloud] 05/05: Update changelog for 7.0.4+dfsg-4~deb8u3 release

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to branch jessie
in repository owncloud.

commit aeefe8fd9526655a6c44bb1e60410246ab9dd77e
Author: David Prévot <taffit at debian.org>
Date:   Sun Sep 27 18:03:37 2015 -0400

    Update changelog for 7.0.4+dfsg-4~deb8u3 release
---
 debian/changelog | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 503bd03..e2e2e21 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,17 @@
+owncloud (7.0.4+dfsg-4~deb8u3) jessie-security; urgency=high
+
+  * Backport security fixes from 7.0.5, 7.0.7, 8.0.6, and 7.0.9:
+    - Fix stored XSS in "activity" application
+      [oC-SA-2015-010] [CVE-2015-5953]
+    - Fix disclosure of users files when deleting parent folders of shared files
+      [oC-SA-2015-011] [CVE-2015-5954]
+    - Fix information exposure through directory listing
+      [oC-SA-2015-014] [CVE-2015-6500] (Closes: #800126)
+    - Fix PHP arbitrary class instantiation in "files_external"
+      [oC-SA-2015-018]
+
+ -- David Prévot <taffit at debian.org>  Wed, 30 Sep 2015 19:23:46 -0400
+
 owncloud (7.0.4+dfsg-4~deb8u2) jessie; urgency=medium
 
   * Backport security fixes from 7.0.6 and 7.0.8:

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git