[SECURITY] Fedora 19 Update: php-sabredav-Sabre_CardDAV-1.7.9-2.fc19

updates at fedoraproject.org updates at fedoraproject.org
Sat Nov 22 12:36:18 UTC 2014

Fedora Update Notification
2014-11-01 00:32:41

Name        : php-sabredav-Sabre_CardDAV
Product     : Fedora 19
Version     : 1.7.9
Release     : 2.fc19
URL         : http://sabre.io
Summary     : Provides CardDAV support to Sabre_DAV
Description :
CardDAV plugin for Sabre, Adds support for CardDAV in Sabre_DAV.

Update Information:

This update provides ownCloud 5.0.17, the latest release in the 5.x series, plus an extra security-related fix backported from the stable5 branch.

It also provides SabreDAV 1.7.13. This is also a major upgrade from SabreDAV 1.6, and has API incompatibilities. ownCloud is the only Fedora 19 package that requires SabreDAV, and ownCloud 5 cannot work with SabreDAV 1.6: the API-incompatible upgrade is unfortunate but necessary to provide a secure ownCloud release.

ownCloud 4.5, the current version in Fedora 19, is un-maintained, subject to known security issues, and has no upgrade path beyond ownCloud 5. Upgrading directly from 4.5 to the current version in Fedora 20 or 21 - ownCloud 7 - would likely fail.

I plan to update the package to 6.x before Fedora 19 goes EOL and maintain the 5.x and 6.x builds in a side repository to make sure there is a viable upgrade path from Fedora 19.

Initial testing on the 4.x -> 5.x upgrade has been performed, but please back up your user data, ownCloud configuration and ownCloud database before performing the upgrade. Please file negative karma and a bug report for any issues encountered during the upgrade. Ideally, the upgrade should run smoothly on first access to the updated ownCloud instance with no manual intervention required.

* Tue Oct 28 2014 Adam Williamson <awilliam at redhat.com> - 1.7.9-1
- new release 1.7.9 (from SabreDAV 1.7.13, EOL)
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.7.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Sep  5 2013 Joseph Marrero <jmarrero at fedoraproject.org> -	1.7.8-2
- fix package xml files	incorrectly tagged by myself  doc instead of php
* Tue Sep  3 2013 Joseph Marrero <jmarrero at fedoraproject.org> 1.7.8-1
- update to 1.7.8
- use our own package.xml created by Remi Collet as upstream doesn't use pear anymore

  [ 1 ] Bug #1035593 - CVE-2013-6403 owncloud: possible security bypass on admin page (5.0.13) [fedora-all]

This update can be installed with the "yum" update program.  Use
su -c 'yum update php-sabredav-Sabre_CardDAV' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at

More information about the package-announce mailing list