Back Linuxsecurity Fedora 43: nextcloud 32.0.3 Advisory for XSS Fixes 2025
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. NextCloud is extendable via a simple but powerful API for applications and plugins. Update Information : 32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368
NextCloud gives you universal access to your files through a web interface or
WebDAV. It also provides a platform to easily view & sync your contacts,
calendars and bookmarks across all your devices and enables basic editing right
on the web. NextCloud is extendable via a simple but powerful API for
applications and plugins.
32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368
* Fri Dec 12 2025 Andrew Bauer - 32.0.3-1 - 32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368
* Fri Dec 12 2025 Andrew Bauer - 32.0.3-1 - 32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368
[ 1 ] Bug #2420196 - CVE-2025-66512 nextcloud: Nextcloud Server XSS in SVG images when opened outside of Nextcloud [epel-10] [ 2 ] Bug #2420197 - CVE-2025-66512 nextcloud: Nextcloud Server XSS in SVG images when opened outside of Nextcloud [fedora-42] [ 3 ] Bug #2420198 - CVE-2025-66512 nextcloud: Nextcloud Server XSS in SVG images when opened outside of Nextcloud [fedora-43] [ 4 ] Bug #2421368 - nextcloud-32.0.3 is available
[ 1 ] Bug #2420196 - CVE-2025-66512 nextcloud: Nextcloud Server XSS in SVG images when opened outside of Nextcloud [epel-10] [ 2 ] Bug #2420197 - CVE-2025-66512 nextcloud: Nextcloud Server XSS in SVG images when opened outside of Nextcloud [fedora-42] [ 3 ] Bug #2420198 - CVE-2025-66512 nextcloud: Nextcloud Server XSS in SVG images when opened outside of Nextcloud [fedora-43] [ 4 ] Bug #2421368 - nextcloud-32.0.3 is available
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-86c0829159' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
