CVE catalog
CVE-2016-5100
Security update for froxlor
- Severity
- Critical · CVSS 9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.92% · Oct 25, 2026
This update for froxlor fixes the following issues: - Upstream upgrade to version 0.10.23 (boo#846355) - Upstream upgrade to version 0.10.22 (boo#846355) - BuildRequire cron as this contains now the cron directories - Use %license for COPYING file instead of %doc [boo#1082318] Upstream upgrade to version 0.9.40.1 (boo#846355) new features besides API that found their way in: - 2FA / TwoFactor Authentication for accounts - MySQL8 compatibility - new implementation of Let's Encrypt (acme.sh) - customizable error/access log handling for webserver (format, level, pipe-to-script, etc.) - lots and lots of bugfixes and small enhancements Upstream upgrade to version 0.9.39.5 (boo#846355) - PHP rand function for random number generation fixed in previous version (boo#1025193) CVE-2016-5100 - upstream upgrade to version 0.9.39 (boo#846355) - Add and change of froxlor config files and manual - Change Requires to enable use with php7
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Opensuse | froxlor | leap 15.2 | 0.10.23-lp152.4.3.1 | fixed |
| Suse | froxlor | package hub 15 sp2 | 0.10.23-bp152.4.3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Opensuse | froxlor | rpm | leap 15.2 | 0.10.23-lp152.4.3.1 | Not reported | OPENSUSE-SU-2021:0415-1 | Not reported |
| Suse | froxlor | rpm | package hub 15 sp2 | 0.10.23-bp152.4.3.1 | Not reported | OPENSUSE-SU-2021:0450-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: