Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | nextcloud-desktop | 2.5.1-3+deb10u2 |
| Debian · 11 | nextcloud-desktop | 3.1.1-2+deb11u1 |
Vulnerabilities 2
-
Medium 6.5
End-to-end encryption device setup did not verify public key
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.3.0, the Nextcloud Des…
-
Unscored —
Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate v…