ALT-PU-2023-1517: package nextcloud update to version 26.0.0-alt1
Описание
This update upgrades nextcloud to version 26.0.0-alt1.
Устраненные уязвимости14
Связанные уязвимости
ALT-PU-2023-1547: package `nextcloud` update to version 26.0.0-alt1
Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to reset the password of another user and then brute force the 62^21 combinations for the password reset token. As of commit `704eb3aa` password reset attempts are now throttled. Note that 62^21 combinations would significant compute resources to brute force. None the less it is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. There are no known workarounds for this vulnerability.
Nextcloud server is an open source, personal cloud implementation. In ...
Уязвимость облачного программного обеспечения для создания и использования хранилища данных Nextcloud Server, связанная с отсутствием ограничений попыток аутентификации, позволяющая нарушителю сбросить произвольные пароли
