{"affected":[{"ecosystem_specific":{"binaries":[{"froxlor":"0.10.23-bp152.4.3.1"}]},"package":{"ecosystem":"SUSE:Package Hub 15 SP2","name":"froxlor","purl":"purl:rpm/suse/froxlor&distro=SUSE%20Package%20Hub%2015%20SP2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.10.23-bp152.4.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for froxlor fixes the following issues:\n\n- Upstream upgrade to version 0.10.23 (boo#846355)\n- Upstream upgrade to version 0.10.22 (boo#846355)\n\n- BuildRequire cron as this contains now the cron directories\n- Use %license for COPYING file instead of %doc [boo#1082318]\n\nUpstream upgrade to version 0.9.40.1 (boo#846355)\n\nnew features besides API that found their way in:\n\n- 2FA / TwoFactor Authentication for accounts\n- MySQL8 compatibility\n- new implementation of Let's Encrypt (acme.sh)\n- customizable error/access log handling for webserver (format, level, pipe-to-script, etc.)\n- lots and lots of bugfixes and small enhancements\n\nUpstream upgrade to version 0.9.39.5 (boo#846355)\n\n- PHP rand function for random number generation fixed in previous\n  version (boo#1025193) CVE-2016-5100\n- upstream upgrade to version 0.9.39 (boo#846355)\n- Add and change of froxlor config files and manual\n- Change Requires to enable use with php7\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","id":"openSUSE-SU-2021:0450-1","modified":"2021-03-19T19:05:59Z","published":"2021-03-19T19:05:59Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7YQHL4MI6XNUZ25CJOTEP4PACP46MIOF/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1025193"},{"type":"REPORT","url":"https://bugzilla.suse.com/1082318"},{"type":"REPORT","url":"https://bugzilla.suse.com/846355"},{"type":"REPORT","url":"https://bugzilla.suse.com/958100"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-5100"}],"related":["CVE-2016-5100"],"summary":"Security update for froxlor"}