From 269acadbd27cef785f380bd62a44fa9d951ab8453f2eb069d260fbe42e467d00 Mon Sep 17 00:00:00 2001 From: Eric Schirra Date: Wed, 15 Jul 2020 22:38:31 +0000 Subject: [PATCH] Accepting request 821166 from home:ecsos:server - Update to 19.0.1 - Security update Fix (CVE-2020-8183, NC-SA-2020-026, CWE-256) A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call. - No changelog from upstream at this time. OBS-URL: https://build.opensuse.org/request/show/821166 OBS-URL: https://build.opensuse.org/package/show/server:php:applications/nextcloud?expand=0&rev=116 --- nextcloud-19.0.0.tar.bz2 | 3 --- nextcloud-19.0.1.tar.bz2 | 3 +++ nextcloud.changes | 11 +++++++++++ nextcloud.spec | 2 +- 4 files changed, 15 insertions(+), 4 deletions(-) delete mode 100644 nextcloud-19.0.0.tar.bz2 create mode 100644 nextcloud-19.0.1.tar.bz2 diff --git a/nextcloud-19.0.0.tar.bz2 b/nextcloud-19.0.0.tar.bz2 deleted file mode 100644 index 350b110..0000000 --- a/nextcloud-19.0.0.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d23d429657c5e3476d7e73af1eafc70e42a81cfe2ed65b20655a005724fe0aae -size 90077143 diff --git a/nextcloud-19.0.1.tar.bz2 b/nextcloud-19.0.1.tar.bz2 new file mode 100644 index 0000000..e411b7e --- /dev/null +++ b/nextcloud-19.0.1.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:4ef311e00d939915d3a9714cd3a1ad436db9157e04620e4a88c2f427e5e65b2d +size 90595211 diff --git a/nextcloud.changes b/nextcloud.changes index f90c2bb..bdf44c2 100644 --- a/nextcloud.changes +++ b/nextcloud.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Wed Jul 15 20:58:34 UTC 2020 - ecsos + +- Update to 19.0.1 + - Security update + Fix (CVE-2020-8183, NC-SA-2020-026, CWE-256) + A logic error in Nextcloud Server 19.0.0 caused a plaintext + storage of the share password when it was given on the initial + create API call. +- No changelog from upstream at this time. + ------------------------------------------------------------------- Wed Jun 3 17:49:51 UTC 2020 - ecsos diff --git a/nextcloud.spec b/nextcloud.spec index a10cc34..38cf822 100644 --- a/nextcloud.spec +++ b/nextcloud.spec @@ -49,7 +49,7 @@ %endif Name: nextcloud -Version: 19.0.0 +Version: 19.0.1 Release: 0 Summary: File hosting service License: AGPL-3.0-only