Fedora 42 Nextcloud 33.0.1 Key Denial of Service Advisory 2026-ca43aa006f
fedora
April 7, 2026
33.0.1 release
Summary
NextCloud gives you universal access to your files through a web interface or
WebDAV. It also provides a platform to easily view & sync your contacts,
calendars and bookmarks across all your devices and enables basic editing right
on the web. NextCloud is extendable via a simple but powerful API for
applications and plugins.
Update Information:
33.0.1 release
Topics Covered
Change Log
* Sun Mar 29 2026 Andrew Bauer
References
[ 1 ] Bug #2439538 - CVE-2026-2391 nextcloud: qs's arrayLimit bypass in comma parsing allows denial of service [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2439538
[ 2 ] Bug #2439563 - CVE-2026-2391 nextcloud: qs's arrayLimit bypass in comma parsing allows denial of service [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2439563
[ 3 ] Bug #2439579 - CVE-2026-2391 nextcloud: qs's arrayLimit bypass in comma parsing allows denial of service [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2439579
[ 4 ] Bug #2446240 - CVE-2026-30964 nextcloud: web-auth/webauthn-lib: Origin validation bypass due to host component reduction [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2446240
[ 5 ] Bug #2446242 - CVE-2026-30964 nextcloud: web-auth/webauthn-lib: Origin validation bypass due to host component reduction [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2446242
[ 6 ] Bug #2449631 - CVE-2026-...
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ca43aa006f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: nextcloud
Product: Fedora 42
Version: 33.0.1
Release: 1.fc42
URL: http://nextcloud.com
Summary: Private file sync and share server
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!