[SECURITY] Fedora 21 Update: owncloud-7.0.5-2.fc21

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4476
2015-03-26 16:35:19
--------------------------------------------------------------------------------

Name        : owncloud
Product     : Fedora 21
Version     : 7.0.5
Release     : 2.fc21
URL         : http://owncloud.org
Summary     : Private file sync and share server
Description :
ownCloud gives you universal access to your files through a web interface or
WebDAV. It also provides a platform to easily view & sync your contacts,
calendars and bookmarks across all your devices and enables basic editing right
on the web. ownCloud is extendable via a simple but powerful API for
applications and plugins.

--------------------------------------------------------------------------------
Update Information:

This update provides the new release 7.0.5, which resolves currently undisclosed security vulnerabilities in ownCloud.

It is a minor version update and should apply without any issues or special handling, but as usual, we recommend backing up your data, configuration, and database before updating.

We have also backported a post-7.0.5 fix for a 'critical' issue: https://github.com/owncloud/core/issues/14843 .
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 24 2015 Adam Williamson <awilliam at redhat.com> - 7.0.5-2
- fix patch backported in previous build (upstream made a booboo)
* Mon Mar 23 2015 Adam Williamson <awilliam at redhat.com> - 7.0.5-1
- new release 7.0.5 (fixes yet-undisclosed vulns, #1204821 #1204823)
- also backport fix for 'severe' upstream issue #14843
* Sun Feb 22 2015 Adam Williamson <awilliam at redhat.com> - 7.0.4-3
- revise and strengthen Apache configuration layout, fix external apps
- fix external apps for Nginx
* Sat Dec 20 2014 Adam Williamson <awilliam at redhat.com> - 7.0.4-2
- backport upstream support for google PHP lib 1.x and unbundle it
* Tue Dec  9 2014 Adam Williamson <awilliam at redhat.com> - 7.0.4-1
- new release 7.0.4
* Tue Nov 25 2014 Adam Williamson <awilliam at redhat.com> - 7.0.3-3
- fix dropbox autoload patch (thanks Tomas Dolezal) #1168082
* Tue Nov 11 2014 Adam Williamson <awilliam at redhat.com> - 7.0.3-2
- drop unnecessary bits from 3rdparty_includes.patch
- split Dropbox loading changes into a separate patch (submitted upstream)
* Mon Nov 10 2014 Adam Williamson <awilliam at redhat.com> - 7.0.3-1
- new release 7.0.3
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1204821 - owncloud: new security issues fixed upstream in 6.0.7 and 7.0.5
        https://bugzilla.redhat.com/show_bug.cgi?id=1204821
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update owncloud' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------