Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Fedora Nextcloud 33.0.4 JSON Tampering DoS Advisory 2026-e187104307

fedora
Calendar Grey June 5, 2026
Dist Fedora Esm H88
Safeguard your Fedora environment with the latest Nextcloud updates addressing critical JSON tampering and DoS threats.
33.0.4 Release

Summary

NextCloud gives you universal access to your files through a web interface or

WebDAV. It also provides a platform to easily view & sync your contacts,

calendars and bookmarks across all your devices and enables basic editing right

on the web. NextCloud is extendable via a simple but powerful API for

applications and plugins.

Update Information:

33.0.4 Release

Topics%20covered

Topics Covered

security advisory denial of service fedora nextcloud JSON Tampering 33.0.4 Release

Change Log

* Thu May 28 2026 Andrew Bauer - 33.0.4-1 - 33.0.4 Release RHBZ#2482794

References


[ 1 ] Bug #2467998 - CVE-2026-42044 nextcloud: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2467998 [ 2 ] Bug #2468008 - CVE-2026-42044 nextcloud: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2468008 [ 3 ] Bug #2476733 - CVE-2026-44167 nextcloud: phpseclib: Denial of Service via untrusted ASN.1 file loading [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2476733 [ 4 ] Bug #2476734 - CVE-2026-44167 nextcloud: phpseclib: Denial of Service via untrusted ASN.1 file loading [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2476734 [ 5 ] Bug #2482794 - nextcloud-33.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2482794

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e187104307' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
informational
Lowest
Low
Medium
High
Critical

Name: nextcloud
Product: Fedora 43
Version: 33.0.4
Release: 1.fc43
URL: http://nextcloud.com
Summary: Private file sync and share server

Topics%20covered

Topics Covered

security advisory denial of service fedora nextcloud JSON Tampering 33.0.4 Release

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here