Fedora: 2020:0820-0 Important: WordPress Security Release
opensuse
February 15, 2020
An update that fixes 6 vulnerabilities is now available.
Description
This update for nextcloud fixes the following issues:
Nextcloud was updated to 15.0.14:
- NC-SA-2020-002, CVE-2019-15613: workflow rules to depend their behaviour
on the file extension when checking file mimetypes (boo#1162766)
- NC-SA-2019-016, CVE-2019-15623: Exposure of Private Information caused
the server to send it's domain and user IDs to the Nextcloud Lookup
Server without any further data when the Lookup server is disabled
(boo#1162775)
- NC-SA-2019-015, CVE-2019-15624: Improper Input Validation allowed group
admins to create users with IDs of system folders (boo#1162776)
- NC-SA-2019-012, CVE-2020-8119: Improper authorization caused leaking of
previews and files when a file-drop share link is opened via the gallery
app (boo#1162781)
- NC-SA-2019-014, CVE-2020-8118: An authenticated server-side request
forgery allowed to detect local and remote services when adding a new
subscription in the calendar...
Read the Full Advisory
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Package Hub for SUSE Linux Enterprise 12:
zypper in -t patch openSUSE-2020-220=1
Package List
- SUSE Package Hub for SUSE Linux Enterprise 12 (noarch):
nextcloud-13.0.12-19.1
References
https://www.suse.com/security/cve/CVE-2019-15613.html
https://www.suse.com/security/cve/CVE-2019-15621.html
https://www.suse.com/security/cve/CVE-2019-15623.html
https://www.suse.com/security/cve/CVE-2019-15624.html
https://www.suse.com/security/cve/CVE-2020-8118.html
https://www.suse.com/security/cve/CVE-2020-8119.html
https://bugzilla.suse.com/1162766
https://bugzilla.suse.com/1162775
https://bugzilla.suse.com/1162776
https://bugzilla.suse.com/1162781
https://bugzilla.suse.com/1162782
https://bugzilla.suse.com/1162784
--
PREVIOUS
NEXT
Announcement ID: openSUSE-SU-2020:0220-1
Rating: moderate
Affected Products:
SUSE Package Hub for SUSE Linux Enterprise 12
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!