Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1977202
Summary: | CVE-2021-22915 nextcloud: lack of inclusion of IPv6 subnets in rate-limiting considerations allows brute force attacks [fedora-all] | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Marian Rehak <mrehak> |
Component: | nextcloud | Assignee: | Christopher Engelhard <ce> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | 34 | CC: | ce, james.hogarth |
Target Milestone: | --- | Keywords: | Security, SecurityTracking |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | nextcloud-19.0.12-1.fc33 nextcloud-nextcloud_19-3320210630133545.601d93de nextcloud-nextcloud_20-3320210630133442.601d93de nextcloud-nextcloud_stable-3320210630133028.601d93de nextcloud-nextcloud_19-3420210630133545.058368ca nextcloud-20.0.10-1.fc34 | Doc Type: | No Doc Update |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2021-07-09 00:46:08 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Marian Rehak
2021-06-29 08:04:42 UTC
Use the following template to for the 'fedpkg update' request to submit an update for this issue as it contains the top-level parent bug(s) as well as this tracking bug. This will ensure that all associated bugs get updated when new packages are pushed to stable. ===== # bugfix, security, enhancement, newpackage (required) type=security # low, medium, high, urgent (required) severity=high # testing, stable request=testing # Bug numbers: 1234,9876 bugs=1977201,1977202 # Description of your update notes=Security fix for [PUT CVEs HERE] # Enable request automation based on the stable/unstable karma thresholds autokarma=True stable_karma=3 unstable_karma=-3 # Automatically close bugs when this marked as stable close_bugs=True # Suggest that users restart after update suggest_reboot=False ====== Additionally, you may opt to use the bodhi web interface to submit updates: https://bodhi.fedoraproject.org/updates/new FEDORA-2021-afa7968aeb has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2021-afa7968aeb FEDORA-MODULAR-2021-e727d9327a has been submitted as an update to Fedora 33 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-e727d9327a FEDORA-MODULAR-2021-8478b0e630 has been submitted as an update to Fedora 34 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-8478b0e630 FEDORA-EPEL-MODULAR-2021-67b2caafec has been submitted as an update to Fedora Epel 8 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-MODULAR-2021-67b2caafec FEDORA-MODULAR-2021-872921fbec has been submitted as an update to Fedora 33 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-872921fbec FEDORA-MODULAR-2021-7ec13e1ed3 has been submitted as an update to Fedora 34 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-7ec13e1ed3 FEDORA-2021-eac0e52f88 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-eac0e52f88 FEDORA-MODULAR-2021-c8ef31abe2 has been submitted as an update to Fedora 34 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-c8ef31abe2 FEDORA-EPEL-MODULAR-2021-336bd8af0e has been submitted as an update to Fedora Epel 8 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-MODULAR-2021-336bd8af0e FEDORA-MODULAR-2021-ce1106e638 has been submitted as an update to Fedora 33 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-ce1106e638 FEDORA-2021-afa7968aeb has been pushed to the Fedora 33 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-afa7968aeb` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-afa7968aeb See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2021-eac0e52f88 has been pushed to the Fedora 34 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-eac0e52f88` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-eac0e52f88 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-MODULAR-2021-e727d9327a has been pushed to the Fedora 33 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-e727d9327a See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-MODULAR-2021-872921fbec has been pushed to the Fedora 33 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-872921fbec See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-MODULAR-2021-ce1106e638 has been pushed to the Fedora 33 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-ce1106e638 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-MODULAR-2021-8478b0e630 has been pushed to the Fedora 34 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-8478b0e630 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-MODULAR-2021-7ec13e1ed3 has been pushed to the Fedora 34 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-7ec13e1ed3 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-MODULAR-2021-c8ef31abe2 has been pushed to the Fedora 34 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2021-c8ef31abe2 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-EPEL-MODULAR-2021-67b2caafec has been pushed to the Fedora Epel 8 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-MODULAR-2021-67b2caafec See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-EPEL-MODULAR-2021-336bd8af0e has been pushed to the Fedora Epel 8 Modular testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-MODULAR-2021-336bd8af0e See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2021-afa7968aeb has been pushed to the Fedora 33 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-MODULAR-2021-e727d9327a has been pushed to the Fedora 33 Modular stable repository. If problem still persists, please make note of it in this bug report. FEDORA-MODULAR-2021-872921fbec has been pushed to the Fedora 33 Modular stable repository. If problem still persists, please make note of it in this bug report. FEDORA-MODULAR-2021-ce1106e638 has been pushed to the Fedora 33 Modular stable repository. If problem still persists, please make note of it in this bug report. FEDORA-MODULAR-2021-8478b0e630 has been pushed to the Fedora 34 Modular stable repository. If problem still persists, please make note of it in this bug report. FEDORA-MODULAR-2021-7ec13e1ed3 has been pushed to the Fedora 34 Modular stable repository. If problem still persists, please make note of it in this bug report. FEDORA-MODULAR-2021-c8ef31abe2 has been pushed to the Fedora 34 Modular stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2021-eac0e52f88 has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report. |