Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[stable-3.6] Bugfix/e2ee vulnerability empty metadatakeys #5335

Merged
merged 4 commits into from Jan 18, 2023
Merged

[stable-3.6] Bugfix/e2ee vulnerability empty metadatakeys #5335

merged 4 commits into from Jan 18, 2023

Conversation

backportbot-nextcloud[bot]
Copy link

@backportbot-nextcloud backportbot-nextcloud bot commented Jan 18, 2023 •
edited by allexzander

  • ⚠️ This backport had conflicts and is incomplete

backport of #5323

@backportbot-nextcloud backportbot-nextcloud bot added this to the 3.6.5 milestone Jan 18, 2023
@allexzander
Fix security vulnerability when receiving empty metadataKeys from the…
8abf013 
… server.

Signed-off-by: alex-z <blackslayer4@gmail.com>
@allexzander
Fix memory leak.
c68c74e 
Signed-off-by: alex-z <blackslayer4@gmail.com>
@allexzander
remove unrelated changes
cdc1a7b 
Signed-off-by: alex-z <blackslayer4@gmail.com>
@allexzander
remove unrelated changes
c2a4af5 
Signed-off-by: alex-z <blackslayer4@gmail.com>
@allexzander allexzander merged commit ff1db46 into stable-3.6 Jan 18, 2023
@allexzander allexzander deleted the backport/5323/stable-3.6 branch January 18, 2023 12:33
@sonarcloud
Copy link

sonarcloud bot commented Jan 18, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@nextcloud-desktop-bot
Copy link

AppImage file: nextcloud-PR-5335-c2a4af5647733523e1d896997594070608fc285e-x86_64.AppImage

To test this change/fix you can simply download above AppImage file and test it.

Please make sure to quit your existing Nextcloud app and backup your data.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@allexzander allexzander allexzander approved these changes

@claucambra claucambra Awaiting requested review from claucambra

@mgallien mgallien Awaiting requested review from mgallien

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
3.6.5
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@nextcloud-desktop-bot @allexzander