Multiple vulnerabilities have been found in Nextcloud, the worst of which could result in denial of service.

Announced

2022-08-10

Revised

2022-08-10

Access

remote

Bugs

#848873 #835073 #834803 #820368 #812443 #802096 #797253

Advisory

https://security.gentoo.org/glsa/202208-17

Affected packages

Package	Arch	Vulnerable	Unaffected
www-apps/nextcloud	*	< 23.0.4	>= 23.0.4

Background

Nextcloud is a personal cloud that runs on your own server.

Description

Multiple vulnerabilities have been discovered in Nextcloud. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Nextcloud users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/nextcloud-23.0.4"

References

• CVE-2021-32653
• CVE-2021-32654
• CVE-2021-32655
• CVE-2021-32656
• CVE-2021-32657
• CVE-2021-32678
• CVE-2021-32679
• CVE-2021-32680
• CVE-2021-32688
• CVE-2021-32703
• CVE-2021-32705
• CVE-2021-32725
• CVE-2021-32726
• CVE-2021-32734
• CVE-2021-32800
• CVE-2021-32801
• CVE-2021-32802
• CVE-2021-41177
• CVE-2021-41178
• CVE-2021-41239
• CVE-2021-41241
• CVE-2022-24741
• CVE-2022-24888
• CVE-2022-24889
• CVE-2022-29243