OPENSUSE-SU-2023:0090-1 Security update for nextcloud-desktop

This update for nextcloud-desktop fixes the following issues: nextcloud-desktop was updated to 3.8.0: - Resize WebView widget once the loginpage rendered - Feature/secure file drop - Check German translation for wrong wording - L10n: Correct word - Fix displaying of file details button for local...

CVE-2023-23911

The CVE-2023-23911 issue is an improper access control vulnerability in Rocket.Chat prior to v6 that could allow an attacker to break the E2E chat-room encryption by changing the group key. Root cause: a user can modify the group key via server-side operations, enabling access to encrypted messag...

Rocket.Chat: Low authorization level at server side API operation e2e.updateGroupKey, let an attacker break the E2E architecture.

The E2E encryption feature in open.rocket.chat server had a vulnerability that allowed an attacker to break the encryption of a secure chat room. The vulnerability was caused by a low authorization level at the server-side API operation e2e.updateGroupKey, which allowed an attacker to insert or...