Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41 Update: Nextcloud 31.0.2 Moderate XSS Issue Fixed

fedora
Calendar Grey April 3, 2025
Dist Fedora Esm H88
The recent update for Nextcloud resolves a critical XSS vulnerability in Fedora 41, bolstering security measures and introducing additional enhancements to user experience.
31.0.2 release RHBZ#2345769 RHBZ#2345775 RHBZ#2350414

Summary

NextCloud gives you universal access to your files through a web interface or

WebDAV. It also provides a platform to easily view & sync your contacts,

calendars and bookmarks across all your devices and enables basic editing right

on the web. NextCloud is extendable via a simple but powerful API for

applications and plugins.

Update Information:

31.0.2 release RHBZ#2345769 RHBZ#2345775 RHBZ#2350414

Topics%20covered

Topics Covered

security advisory software update Fedora XSS software release nextcloud

Change Log

* Tue Mar 25 2025 Andrew Bauer - 31.0.2-1 - 31.0.2 release RHBZ#2345769 RHBZ#2345775 RHBZ#2350414 * Sun Mar 2 2025 Andrew Bauer - 31.0.0-1 - 31.0.0 release RHBZ#2324262 RHBZ#2336564 * Fri Feb 7 2025 Andrew Bauer - 30.0.5-4 - escape period * Mon Feb 3 2025 Andrew Bauer - 30.0.5-3 - use composer-generators to autogenerate php-composer provides

References


[ 1 ] Bug #2345769 - CVE-2025-26791 nextcloud: Mutation XSS in DOMPurify Due to Improper Template Literal Handling [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2345769 [ 2 ] Bug #2345775 - CVE-2025-26791 nextcloud: Mutation XSS in DOMPurify Due to Improper Template Literal Handling [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2345775 [ 3 ] Bug #2350414 - nextcloud-31.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2350414

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-9e6b55e70b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: nextcloud
Product: Fedora 41
Version: 31.0.2
Release: 1.fc41
URL: http://nextcloud.com
Summary: Private file sync and share server

Topics%20covered

Topics Covered

security advisory software update Fedora XSS software release nextcloud

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here