Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 41 Updates: Nextcloud 31.0.9 Security Patch for CVE-2025-54881

31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842 RHBZ#2389843 RHBZ#2389814 RHBZ#2389815. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-e750be1b9c 2025-09-30 01:22:32.449044+00:00 -------------------------------------------------------------------------------- Name : nextcloud Product : Fedora 41 Version : 31.0.9 Release : 1.fc41 URL : http://nextcloud.com Summary : Private file sync and share server Description : NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. NextCloud is extendable via a simple but powerful API for applications and plugins. -------------------------------------------------------------------------------- Update Information: 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842 RHBZ#2389843 RHBZ#2389814 RHBZ#2389815 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 20 2025 Andrew Bauer - 31.0.9-1 - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842 RHBZ#2389843 RHBZ#2389814 RHBZ#2389815 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2388493 - nextcloud-31.0.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2388493 [ 2 ] Bug #2389814 - CVE-2025-54881 nextcloud: Mermaid cross site scripting [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2389814 [ 3 ] Bug #2389815 - CVE-2025-54880 nextcloud: Mermaid cross site scripting [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2389815 [ 4 ] Bug #2389830 - CVE-2025-54881 nextcloud: Mermaid cross site scripting [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2389830 [ 5 ] Bug #2389831 -CVE-2025-54880 nextcloud: Mermaid cross site scripting [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2389831 [ 6 ] Bug #2389842 - CVE-2025-54881 nextcloud: Mermaid cross site scripting [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2389842 [ 7 ] Bug #2389843 - CVE-2025-54880 nextcloud: Mermaid cross site scripting [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2389843 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e750be1b9c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Nextcloud 31.0.9 update addresses security issues and improves functionality for Fedora 41 users. Stay secure!. nextcloud update, Fedora 41, Mermaix XSS, security advisory, software update. . Severity: Important. LinuxSecurity.com Team

Sep 30, 2025 •Important Fedora