Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Debian: DSA-4974-1 Critical: Nextcloud Client Information Disclosure

debian
Calendar Grey September 19, 2021
Debian Logo
The updated version of the Nextcloud desktop client rectifies security flaws present in the stable and oldstable Debian releases.
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure

Summary

Two vulnerabilities were discovered in the Nextcloud desktop client,
which could result in information disclosure.

For the oldstable distribution (buster), these problems have been fixed
in version 2.5.1-3+deb10u2.

For the stable distribution (bullseye), these problems have been fixed in
version 3.1.1-2+deb11u1.

We recommend that you upgrade your nextcloud-desktop packages.

For the detailed security status of nextcloud-desktop please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/nextcloud-desktop

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: nextcloud-desktop
CVE ID: CVE-2021-22895 CVE-2021-32728

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here