Fedora 33: RCE Risk in Nextcloud Client FEDORA-2021-1ffffa0251 Critical

Nextcloud-client enables you to connect to your private Nextcloud Server.

With it you can create folders in your home directory, and keep the contents

of those folders synced with your Nextcloud server. Simply copy a file into

the directory and the Nextcloud Client does the rest.

3.1.3 release

* Thu Mar 11 2021 Mukundan Ragavan - 3.1.3-1

- Update to 3.1.3

* Tue Jan 26 2021 Fedora Release Engineering - 3.1.1-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[ 1 ] Bug #1950119 - CVE-2021-22879 nextcloud-client: nextcloud: missing URL validation allowed RCE for the server on the desktop client [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1950119

su -c 'dnf upgrade --advisory FEDORA-2021-1ffffa0251' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure