The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update includes a patch from upstream REL_31 release which fix the issue. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2648-2
Update to Nextcloud 19.0.3, fixes CVE-2020-8236, CVE-2020-8223, CVE-2020-8183, CVE-2020-8173. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-050aaa14f7 2020-10-23 22:01:02.260427 --------------------------------------------------------------------------------Name : nextcloud Product : Fedora 33 Version : 19.0.3 Release : 1.fc33 URL : http://nextcloud.com Summary : Private file sync and share server Description : NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. NextCloud is extendable via a simple but powerful API for applications and plugins. --------------------------------------------------------------------------------Update Information: Update to Nextcloud 19.0.3, fixes CVE-2020-8236, CVE-2020-8223, CVE-2020-8183, CVE-2020-8173 --------------------------------------------------------------------------------ChangeLog: * Sun Oct 11 2020 Christopher Engelhard - 19.0.3-1 - Update to Nextcloud 19.0.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1873705 - Please update to 19.0.1 on Fedora 33 https://bugzilla.redhat.com/show_bug.cgi?id=1873705 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-050aaa14f7' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
The update for ganeti issued as DSA-3431-1 causes the gnt-instance info command to fail for all instances of type DRBD. Updated packages are now available to address this regression. For reference the original advisory text follows. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3431-2
It was discovered that the core client for the BOINC distributed computing infrastructure performs incorrect validation of the return values of OpenSSL's RSA functions. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1718-1
Get the latest Linux and open source security news straight to your inbox.