openSUSE-SU-2023:0083-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0083-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2023:0083-1

Upstream

CVE (3)

Related

CVE (3)

Published

2023-04-03T14:24:07Z

Modified

2026-02-04T02:19:54Z

Summary

Security update for nextcloud

Details

This update for nextcloud fixes the following issues:

Update to 23.0.12 See: https://nextcloud.com/changelog/#latest23
This also fix security issues:
- CVE-2022-35931: Password Policy app could generate passwords that would be block (boo#1203190)
- CVE-2022-39346: Missing length validation of user displayname allows to generate an SQL error (boo#1205802)
- CVE-2023-25579: Potential directory traversal in OC\Files\Node\Folder::getFullPath (boo#1208591)

References

Affected packages

SUSE:Package Hub 15 SP4 / nextcloud

Package

Name: nextcloud
Purl: pkg:rpm/suse/nextcloud&distro=SUSE%20Package%20Hub%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

23.0.12-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "nextcloud":  "23.0.12-bp154.2.3.1",
            "nextcloud-apache":  "23.0.12-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0083-1.json"

openSUSE:Leap 15.4 / nextcloud

Package

Name: nextcloud
Purl: pkg:rpm/opensuse/nextcloud&distro=openSUSE%20Leap%2015.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

23.0.12-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "nextcloud":  "23.0.12-bp154.2.3.1",
            "nextcloud-apache":  "23.0.12-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0083-1.json"