File _patchinfo of Package patchinfo

<patchinfo incident="17434">
<issue tracker="bnc" id="1196952">VUL-1: CVE-2022-24741: nextcloud: High memory usage for generating preview of broken image</issue>
<issue tracker="bnc" id="1196905">VUL-1: CVE-2021-41239: nextcloud: user enumeration setting not obeyed in User Status API</issue>
<issue tracker="bnc" id="1196908">VUL-0: CVE-2021-41241: nextcloud: groupfolders advanced permissions is not obeyed for subfolders</issue>
<issue tracker="cve" id="2021-41741"/>
<issue tracker="cve" id="2021-41239"/>
<issue tracker="cve" id="2021-41241"/>
<packager>ecsos</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for nextcloud</summary>
<description>This update for nextcloud fixes the following issues:

nextcloud was updated to 21.0.9:

- CVE-2021-41239 (CWE-200): user enumeration setting not obeyed in User Status API (boo#1196905)
- CVE-2021-41241 (CWE-863): groupfolders advanced permissions is not obeyed for subfolders (boo#1196908)
- CVE-2021-41741 (CWE-400): High memory usage for generating preview of broken image (boo#1196952)
- For more changes see https://nextcloud.com/changelog/#21-0-9
</description>
</patchinfo>

openSUSE Build Service is sponsored by