Nextcloud Bugfix und Security Version 11.0.1 veröffentlicht

Die Entwickler der Open-Source Cloudsoftware, Nextcloud, haben in diesem Monat das Bugfix und Security Release in Version 11.0.1 veröffentlicht. Dieses behebt ca. 24 Fehler in den Versionen 9, 10 und 11 von Nextcloud. Ein Sicherheitsupdate wurde in dem vor kurzem eingeführten SwiftMailer durchgeführt. Hier gab es eine kritische Lücke in der Library für das Senden von E-Mails über PHP.

Nextcloud Version 11.0.1 Release Notes:

Download: nextcloud-11.0.1.tar.bz2 or nextcloud-11.0.1.zip
Check the file integrity with:
MD5: nextcloud-11.0.1.tar.bz2.md5 or nextcloud-11.0.1.zip.md5
SHA256: nextcloud-11.0.1.tar.bz2.sha256 or nextcloud-11.0.1.zip.sha256
SHA512: nextcloud-11.0.1.tar.bz2.sha512 or nextcloud-11.0.1.zip.sha512
PGP (Key): nextcloud-11.0.1.tar.bz2.asc or nextcloud-11.0.1.zip.asc

Server

• Safari CSPv3 support is sub-par (server/2699)
• Fix legacy DAV endpoint (server/2685)
• Use unmasked permissions in shared scanner (server/2696)
• Do not connect to database before creating it (server/2703)
• Fix todo list activity filter (server/2746)
• Changed anchor in settings page (server/2805)
• Also check in cron for old php version (server/2809)
• Add DAV repair step to fix calendar data (server/2807)
• Only log as info when we can not create a new DB user (server/2750)
• Fix wording for apps mgmt buttons (server/2751)
• Use a form so firefox doesn’t try to save the space as a password (server/2804)
• Fix overwriting parameter (server/2825)
• Applied security hardening in SwiftMailer (core/2882)
• Don’t set Content-Disposition header if one already exists (server/2949)
• Don’t link to the oC forum (server/2988)
• Set redirect_url on 2FA challenge page (server/2981)
• Dont write a certificate bundle if the shipped ca bundle is empty (server/2994)
• Remove group restrictions when those are not allowed anymore (server/2980)

Activity

• Update docs and samples (activity/92)
• Make sure the preview URLs are absolute (activity/91)

User_SAML

• Update SAML library (user_saml/64))
• Make the JS work with sudo mode (user_saml/71))
• Enabled strict mode (user_saml/75))

files_retention

• Delete job if tag not found (files_retention/18)

Also included is a precautionary update for a recent SwiftMailer security issue.