[Git][security-tracker-team/security-tracker][master] Add CVE-2025-66549/nextcloud-desktop

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b50f1fa by Salvatore Bonaccorso at 2025-12-05T21:56:05+01:00
Add CVE-2025-66549/nextcloud-desktop

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41,7 +41,11 @@ CVE-2025-66551 (Nextcloud Tables allows you to create your own tables with indiv
 CVE-2025-66550 (Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.17 an ...)
 	NOT-FOR-US: Nextcloud Calendar
 CVE-2025-66549 (Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3 ...)
-	TODO: check
+	- nextcloud-desktop 3.16.6-3
+	NOTE: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h9xj-qh76-q3hw
+	NOTE: https://github.com/nextcloud/desktop/pull/8330
+	NOTE: Fixed by: https://github.com/nextcloud/desktop/commit/27ede927d4a86939a4243cc6a1fb656ce04512ef (v3.17.0-rc1)
+	NOTE: Fixed by: https://github.com/nextcloud/desktop/commit/209530ae9a6dd8c6607ef4e33e84393e4ae6e3e3 (v3.16.5)
 CVE-2025-66548 (Nextcloud Deck is a kanban style organization tool aimed at personal p ...)
 	NOT-FOR-US: Nextcloud Deck
 CVE-2025-66547 (Nextcloud Server is a self hosted personal cloud system. In Nextcloud  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b50f1fa4d5da925a38ff1556aa0b8867049c86c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b50f1fa4d5da925a38ff1556aa0b8867049c86c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251205/ba1b6dad/attachment.htm>