Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 43: Nextcloud Critical Auth Bypass Fix FEDORA-2025-84af4b9872

fedora
Calendar Grey December 3, 2025
Dist Fedora Esm H88
NextCloud update addresses critical authorization bypass in Fedora 43. Install via dnf for enhanced security.
32.0.2 release RHBZ#2416087 RHBZ#2415750 RHBZ#2415751 RHBZ#2415752 RHBZ#2415753

Summary

NextCloud gives you universal access to your files through a web interface or

WebDAV. It also provides a platform to easily view & sync your contacts,

calendars and bookmarks across all your devices and enables basic editing right

on the web. NextCloud is extendable via a simple but powerful API for

applications and plugins.

Update Information:

32.0.2 release RHBZ#2416087 RHBZ#2415750 RHBZ#2415751 RHBZ#2415752 RHBZ#2415753

Topics%20covered

Topics Covered

security advisory fedora update critical authorization bypass nextcloud

Change Log

* Mon Nov 24 2025 Andrew Bauer - 32.0.2-1 - 32.0.2 release RHBZ#2416087 RHBZ#2415750 RHBZ#2415751 RHBZ#2415752 RHBZ#2415753

References


[ 1 ] Bug #2415750 - CVE-2025-64500 nextcloud: Symfony HttpFoundation: Limited authorization bypass [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2415750 [ 2 ] Bug #2415751 - CVE-2025-64500 nextcloud: Symfony HttpFoundation: Limited authorization bypass [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2415751 [ 3 ] Bug #2415752 - CVE-2025-64500 nextcloud: Symfony HttpFoundation: Limited authorization bypass [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2415752 [ 4 ] Bug #2415753 - CVE-2025-64500 nextcloud: Symfony HttpFoundation: Limited authorization bypass [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2415753 [ 5 ] Bug #2416087 - nextcloud-32.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2416087

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-84af4b9872' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: nextcloud
Product: Fedora 43
Version: 32.0.2
Release: 1.fc43
URL: http://nextcloud.com
Summary: Private file sync and share server

Topics%20covered

Topics Covered

security advisory fedora update critical authorization bypass nextcloud

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here