openSUSE-SU-2021:0415-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0415-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2021:0415-1
Related
Published
2021-03-16T13:05:56Z
Modified
2021-03-16T13:05:56Z
Summary
Security update for froxlor
Details

This update for froxlor fixes the following issues:

  • Upstream upgrade to version 0.10.23 (boo#846355)
  • Upstream upgrade to version 0.10.22 (boo#846355)

  • BuildRequire cron as this contains now the cron directories

  • Use %license for COPYING file instead of %doc [boo#1082318]

Upstream upgrade to version 0.9.40.1 (boo#846355)

new features besides API that found their way in:

  • 2FA / TwoFactor Authentication for accounts
  • MySQL8 compatibility
  • new implementation of Let's Encrypt (acme.sh)
  • customizable error/access log handling for webserver (format, level, pipe-to-script, etc.)
  • lots and lots of bugfixes and small enhancements

Upstream upgrade to version 0.9.39.5 (boo#846355)

  • PHP rand function for random number generation fixed in previous version (boo#1025193) CVE-2016-5100
  • upstream upgrade to version 0.9.39 (boo#846355)
  • Add and change of froxlor config files and manual
  • Change Requires to enable use with php7
References

Affected packages

openSUSE:Leap 15.2 / froxlor

Package

Name
froxlor
Purl
pkg:rpm/opensuse/froxlor&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.23-lp152.4.3.1

Ecosystem specific

{
    "binaries": [
        {
            "froxlor": "0.10.23-lp152.4.3.1"
        }
    ]
}