Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #4768 > unrolled thread
| Started by | Dominic Hargreaves <dom@earth.li> |
|---|---|
| First post | 2016-05-04 21:40 +0200 |
| Last post | 2016-05-05 10:40 +0200 |
| Articles | 3 — 3 participants |
Back to article view | Back to linux.debian.security
ownCloud security support Dominic Hargreaves <dom@earth.li> - 2016-05-04 21:40 +0200
Re: ownCloud security support Moritz Muehlenhoff <jmm@inutil.org> - 2016-05-05 01:00 +0200
Re: ownCloud security support, citadel Geert Stappers <stappers@stappers.nl> - 2016-05-05 10:40 +0200
| From | Dominic Hargreaves <dom@earth.li> |
|---|---|
| Date | 2016-05-04 21:40 +0200 |
| Subject | ownCloud security support |
| Message-ID | <rvaOn-1Bc-29@gated-at.bofh.it> |
Hi all, Firstly, thank you, David, for your excellent work packaging ownCloud and its dependencies. It allowed me a very easy setup for an installation which has been really valuable so far. (I will need to think carefully about future plans for this service.) Given the recent removal of owncloud from Debian unstable[1] for understandable reasons, there is an obvious question about what support we can expect for owncloud in stable. According to the upstream website[2] 7.x is no longer security-supported. Perhaps the security team could comment on this and consider whether end of support is appropriate? Best wishes, Dominic. [1] <https://packages.qa.debian.org/o/owncloud/news/20160426T182410Z.html> [2] <https://owncloud.org/changelog/#latest7>
[toc] | [next] | [standalone]
| From | Moritz Muehlenhoff <jmm@inutil.org> |
|---|---|
| Date | 2016-05-05 01:00 +0200 |
| Message-ID | <rvdVV-4gE-47@gated-at.bofh.it> |
| In reply to | #4768 |
On Wed, May 04, 2016 at 08:35:03PM +0100, Dominic Hargreaves wrote:
> Hi all,
>
> Firstly, thank you, David, for your excellent work packaging ownCloud
> and its dependencies. It allowed me a very easy setup for an installation
> which has been really valuable so far. (I will need to think carefully
> about future plans for this service.)
>
> Given the recent removal of owncloud from Debian unstable[1] for
> understandable reasons, there is an obvious question about what
> support we can expect for owncloud in stable. According to the upstream
> website[2] 7.x is no longer security-supported.
>
> Perhaps the security team could comment on this and consider whether
> end of support is appropriate?
We can probably backport security issues for a while. It's hard to predict
of course, if they have some kind of "we totally messed up the design and
need to rewrite parts of owncloud to fix that vulnerability" (not totally
unlikely given the history of owncloud...) vulnerability we might reach a
point where we'll need to EOL it.
It's certainly not something I expect to make it into a jessie LTS, though.
Cheers,
Moritz
[toc] | [prev] | [next] | [standalone]
| From | Geert Stappers <stappers@stappers.nl> |
|---|---|
| Date | 2016-05-05 10:40 +0200 |
| Subject | Re: ownCloud security support, citadel |
| Message-ID | <rvmZe-4Nh-69@gated-at.bofh.it> |
| In reply to | #4769 |
[Multipart message — attachments visible in raw view] — view raw
On Thu, May 05, 2016 at 12:56:30AM +0200, Moritz Muehlenhoff wrote: > On Wed, May 04, 2016 at 08:35:03PM +0100, Dominic Hargreaves wrote: > > Hi all, > > > > Firstly, thank you, David, for your excellent work packaging ownCloud > > and its dependencies. It allowed me a very easy setup for an installation > > which has been really valuable so far. (I will need to think carefully > > about future plans for this service.) > > > > Given the recent removal of owncloud from Debian unstable[1] for > > understandable reasons, there is an obvious question about what > > support we can expect for owncloud in stable. According to the upstream > > website[2] 7.x is no longer security-supported. > > > > Perhaps the security team could comment on this and consider whether > > end of support is appropriate? > > We can probably backport security issues for a while. It's hard to predict > of course, if they have some kind of "we totally messed up the design and > need to rewrite parts of owncloud to fix that vulnerability" (not totally > unlikely given the history of owncloud...) vulnerability we might reach a > point where we'll need to EOL it. > > It's certainly not something I expect to make it into a jessie LTS, though. > > Cheers, > Moritz > Hi, FWIW there is Citadel It has a more down to earth name then own cloud http://www.citadel.org/doku.php/features Groeten Geert Stappers -- Leven en laten leven
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web