openSUSE-SU-2021:0450-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0450-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2021:0450-1
- Related
- Published
- 2021-03-19T19:05:59Z
- Modified
- 2021-03-19T19:05:59Z
- Summary
- Security update for froxlor
- Details
-
This update for froxlor fixes the following issues:
- Upstream upgrade to version 0.10.23 (boo#846355)
Upstream upgrade to version 0.10.22 (boo#846355)
BuildRequire cron as this contains now the cron directories
- Use %license for COPYING file instead of %doc [boo#1082318]
Upstream upgrade to version 0.9.40.1 (boo#846355)
new features besides API that found their way in:
- 2FA / TwoFactor Authentication for accounts
- MySQL8 compatibility
- new implementation of Let's Encrypt (acme.sh)
- customizable error/access log handling for webserver (format, level, pipe-to-script, etc.)
- lots and lots of bugfixes and small enhancements
Upstream upgrade to version 0.9.39.5 (boo#846355)
- PHP rand function for random number generation fixed in previous version (boo#1025193) CVE-2016-5100
- upstream upgrade to version 0.9.39 (boo#846355)
- Add and change of froxlor config files and manual
- Change Requires to enable use with php7 This update was imported from the openSUSE:Leap:15.2:Update update project.
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7YQHL4MI6XNUZ25CJOTEP4PACP46MIOF/
- https://bugzilla.suse.com/1025193
- https://bugzilla.suse.com/1082318
- https://bugzilla.suse.com/846355
- https://bugzilla.suse.com/958100
- https://www.suse.com/security/cve/CVE-2016-5100