{"id":"openSUSE-SU-2021:0415-1","summary":"Security update for froxlor","details":"This update for froxlor fixes the following issues:\n\n- Upstream upgrade to version 0.10.23 (boo#846355)\n- Upstream upgrade to version 0.10.22 (boo#846355)\n\n- BuildRequire cron as this contains now the cron directories\n- Use %license for COPYING file instead of %doc [boo#1082318]\n\nUpstream upgrade to version 0.9.40.1 (boo#846355)\n\nnew features besides API that found their way in:\n\n- 2FA / TwoFactor Authentication for accounts\n- MySQL8 compatibility\n- new implementation of Let's Encrypt (acme.sh)\n- customizable error/access log handling for webserver (format, level, pipe-to-script, etc.)\n- lots and lots of bugfixes and small enhancements\n\nUpstream upgrade to version 0.9.39.5 (boo#846355)\n\n- PHP rand function for random number generation fixed in previous\n  version (boo#1025193) CVE-2016-5100\n- upstream upgrade to version 0.9.39 (boo#846355)\n- Add and change of froxlor config files and manual\n- Change Requires to enable use with php7","modified":"2026-03-11T07:32:58.267979Z","published":"2021-03-16T13:05:56Z","related":["CVE-2016-5100"],"upstream":["CVE-2016-5100"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AAUIVTQVXK6DU6ZXURWINSWBU3EBTIT7/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1025193"},{"type":"REPORT","url":"https://bugzilla.suse.com/1082318"},{"type":"REPORT","url":"https://bugzilla.suse.com/846355"},{"type":"REPORT","url":"https://bugzilla.suse.com/958100"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-5100"}],"affected":[{"package":{"name":"froxlor","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/froxlor&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-lp152.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"froxlor":"0.10.23-lp152.4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0415-1.json"}}],"schema_version":"1.7.5"}