openSUSE-SU-2021:0450-1

    Dashboard / Vulnerabilities / openSUSE-SU-2021:0450-1

    openSUSE-SU-2021:0450-1

    Published: 19 Mar 2021Last Modified: 4 Feb 2026
    Upstream:
    CVE-2016-5100
    Aliases:
    CVE-2016-5100

    Summary: Security update for froxlor

    Details: This update for froxlor fixes the following issues: - Upstream upgrade to version 0.10.23 (boo#846355) - Upstream upgrade to version 0.10.22 (boo#846355) - BuildRequire cron as this contains now the cron directories - Use %license for COPYING file instead of %doc [boo#1082318] Upstream upgrade to version 0.9.40.1 (boo#846355) new features besides API that found their way in: - 2FA / TwoFactor Authentication for accounts - MySQL8 compatibility - new implementation of Let's Encrypt (acme.sh) - customizable error/access log handling for webserver (format, level, pipe-to-script, etc.) - lots and lots of bugfixes and small enhancements Upstream upgrade to version 0.9.39.5 (boo#846355) - PHP rand function for random number generation fixed in previous version (boo#1025193) CVE-2016-5100 - upstream upgrade to version 0.9.39 (boo#846355) - Add and change of froxlor config files and manual - Change Requires to enable use with php7 This update was imported from the openSUSE:Leap:15.2:Update update project.

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/7YQHL4MI6XNUZ25CJOTEP4PACP46MIOF/, https://bugzilla.suse.com/1025193, https://bugzilla.suse.com/1082318, https://bugzilla.suse.com/846355, https://bugzilla.suse.com/958100, https://www.suse.com/security/cve/CVE-2016-5100

    Affected packages

    Package

    Name: froxlor

    Purl: pkg:rpm/suse/froxlor&distro=SUSE%20Package%20Hub%2015%20SP2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.10.23-bp152.4.3.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2021:0450-1 | CVE-DB