Update to 20.0.11; Fixes RHBZ#1981503; Fixes RHBZ#1981505

changelog

@@ -0,0 +1,124 @@
+* Wed Jun 30 2021 Christopher Engelhard <ce@lcts.de> - 20.0.10-1
+- Update to 20.0.10, fixes multiple CVEs (RHBZ 1934830, RHBZ 1934838,
+  RHBZ 1934840, RHBZ 1977202)
+- Include php-fpm config in httpd subpackage
+- Set php memory limit to 512MB (RHBZ 1933529)
+- Add Referrer-policy no-referrer to nginx config (RHBZ 1933530)
+
+* Mon Mar 29 2021 Christopher Engelhard <ce@lcts.de> - 20.0.8-2
+- Remove dependency on php-imap
+
+* Sat Feb 27 2021 Christopher Engelhard <ce@lcts.de> - 20.0.8-1
+- Update to 20.0.8
+
+* Sat Feb 20 2021 Christopher Engelhard <ce@lcts.de> - 20.0.7-1
+- Update to 20.0.7
+
+* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 20.0.5-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
+
+* Sat Jan 16 2021 Christopher Engelhard <ce@lcts.de> - 20.0.5-1
+- Update to 20.0.5
+
+* Mon Dec 28 2020 Christopher Engelhard <ce@lcts.de> - 20.0.4-2
+- Remove duplicate dependencies on database drivers
+- Remove syslinux related stuff, as these are included in
+  the syslinux policy
+- Add Provides: for bundled libraries
+
+* Thu Dec 17 2020 Christopher Engelhard <ce@lcts.de> - 20.0.4-1
+- Update to 20.0.4
+
+* Thu Dec 10 2020 Christopher Engelhard <ce@lcts.de> - 20.0.3-1
+- Update to 20.0.3
+
+* Thu Nov 19 2020 Christopher Engelhard <ce@lcts.de> - 20.0.2-1
+- Update to 20.0.2
+
+* Sat Nov 14 2020 Christopher Engelhard <ce@lcts.de> - 20.0.2-0.1.rc1
+- Update to 20.0.2RC1
+
+* Wed Nov 11 2020 Christopher Engelhard <ce@lcts.de> - 20.0.1-3
+- Remove CentOS/RHEL 7 support from spec file
+
+* Tue Nov 10 2020 Christopher Engelhard <ce@lcts.de> - 20.0.1-2
+- Add dependencies on php-cli (for occ) and php-process (for posix)
+- Remove unneeded BR on php-cli
+- Add patch to allow updates across more than one major version
+
+* Mon Oct 26 2020 Christopher Engelhard <ce@lcts.de> - 20.0.1-1
+- Update to Nextcloud 20.0.1
+
+* Sun Oct 11 2020 Christopher Engelhard <ce@lcts.de> - 20.0.0-1
+- Update to Nextcloud 20.0.0
+
+* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 19.0.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Sun Jun 28 2020 Ivan Chavero <ichavero@redhat.com> - 19.0.0-1
+- Update to Nextcloud 19.0.0
+- Update licenses
+
+* Thu Apr 30 2020 Ivan Chavero <ichavero@redhat.com> - 18.0.4-1
+- Update to Nextcloud 18.0.4
+
+* Sat Feb 08 2020 Ivan Chavero <ichavero@redhat.com> - 18.0.0-1
+- Refactor spec file
+- Update to Nextcoud 18.0.0
+
+* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-9
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-8
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Wed Jan  9 2019 Remi Collet <remi@remirepo.net> - 10.0.4-6
+- drop dependency on php-password-compat #1658730
+- allow php-smbclient 1.0.0 #1663672
+- allow doctrine/dbal 2.x
+
+* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Sat Mar 25 2017 Shawn Iwinski <shawn.iwinski@gmail.com> - 10.0.4-2
+- Add max versions to dependencies to limit each to 1 major version
+- Update some dependencies to use php-composer(*) instead of package names
+- Prepare for php-composer(google/apiclient) version 2 and new version 1 package
+
+* Tue Feb 28 2017 James Hogarth <james.hogarth@gmail.com> - 10.0.4-1
+- update to 10.0.4
+- Add migration from owncloud documentation
+- Add systemd timer for background jobs
+
+* Wed Feb 08 2017 James Hogarth <james.hogarth@gmail.com> - 10.0.3-1
+- update to 10.0.3
+
+* Thu Oct 06 2016 James Hogarth <james.hogarth@gmail.com> - 10.0.1-1
+- update to 10.0.1
+
+* Mon Aug 01 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-5
+- Use lua to have a common srpm between epel7 and fedora
+
+* Fri Jul 29 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-4
+- Don't unbundle javascript on EPEL7 due to versioning issues
+
+* Fri Jul 29 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-3
+- Unbundle javascript libraries from core where possible
+
+* Tue Jul 26 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-2
+- Update the autoloader to use the path from the approved package
+
+* Tue Jul 19 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-1
+- New release 9.0.53
+
+* Thu Jul 14 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.52-1
+- Initial nextcloud build

nextcloud-default-nginx.conf

@@ -12,6 +12,7 @@
         add_header X-Robots-Tag none;
         add_header X-Download-Options noopen;
         add_header X-Permitted-Cross-Domain-Policies none;
+        add_header Referrer-Policy no-referrer always;
 
 
         # set max upload size

nextcloud-php-fpm.conf

@@ -15,6 +15,7 @@ php_admin_flag[log_errors] = on
 php_value[session.save_handler] = files
 php_value[session.save_path]    = /var/lib/php/session
 php_value[soap.wsdl_cache_dir]  = /var/lib/php/wsdlcache
+php_value[memory_limit] = 512M
 php_value[upload_max_filesize] = 10G
 php_value[post_max_size] = 10G
 env[HOSTNAME] = $HOSTNAME

nextcloud.spec

@@ -1,6 +1,6 @@
 Name:           nextcloud
-Version:        20.0.5
-Release:        2%{?dist}
+Version:        20.0.11
+Release:        %autorelease
 Summary:        Private file sync and share server
 License:        AGPLv3+ and MIT and BSD and ASL 2.0 and WTFPL and CC-BY-SA and GPLv3+ and Adobe
 URL:            http://nextcloud.com
@@ -71,7 +71,6 @@ Requires:       php-zip
 Requires:       php-filter
 Requires:       php-ldap
 Requires:       php-smbclient
-Requires:       php-imap
 Requires:       php-gmp
 Requires:       php-process
 Requires:       php-pecl-imagick
@@ -200,7 +199,7 @@ Summary:        Httpd integration for NextCloud
 Provides:       %{name}-webserver = %{version}-%{release}
 Requires:       %{name} = %{version}-%{release}
 # PHP dependencies
-Requires:       php
+Requires:       php-fpm httpd
 
 %description httpd
 %{summary}.
@@ -474,6 +473,8 @@ install -Dpm 644 %{SOURCE200} \
     %{buildroot}%{_sysconfdir}/nginx/default.d/%{name}.conf
 install -Dpm 644 %{SOURCE201} \
     %{buildroot}%{_sysconfdir}/nginx/conf.d/%{name}.conf
+
+# php-fpm config
 install -Dpm 644 %{SOURCE202} \
     %{buildroot}%{_sysconfdir}/php-fpm.d/%{name}.conf
 
@@ -483,10 +484,12 @@ install -Dpm 644 %{SOURCE3} %{buildroot}%{_unitdir}/nextcloud-cron.timer
 
 %post httpd
 /usr/bin/systemctl reload httpd.service > /dev/null 2>&1 || :
+/usr/bin/systemctl reload php-fpm.service > /dev/null 2>&1 || :
 
 %postun httpd
 if [ $1 -eq 0 ]; then
   /usr/bin/systemctl reload httpd.service > /dev/null 2>&1 || :
+  /usr/bin/systemctl reload php-fpm.service > /dev/null 2>&1 || :
 fi
 
 %post nginx
@@ -519,6 +522,7 @@ fi
 %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}.conf
 %{_sysconfdir}/httpd/conf.d/%{name}-access.conf.avail
 %{_sysconfdir}/httpd/conf.d/%{name}*.inc
+%config(noreplace) %{_sysconfdir}/php-fpm.d/%{name}.conf
 
 %files nginx
 %config(noreplace) %{_sysconfdir}/nginx/default.d/%{name}.conf
@@ -533,111 +537,4 @@ fi
 
 
 %changelog
-* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 20.0.5-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
-
-* Sat Jan 16 2021 Christopher Engelhard <ce@lcts.de> - 20.0.5-1
-- Update to 20.0.5
-
-* Mon Dec 28 2020 Christopher Engelhard <ce@lcts.de> - 20.0.4-2
-- Remove duplicate dependencies on database drivers
-- Remove syslinux related stuff, as these are included in
-  the syslinux policy
-- Add Provides: for bundled libraries
-
-* Thu Dec 17 2020 Christopher Engelhard <ce@lcts.de> - 20.0.4-1
-- Update to 20.0.4
-
-* Thu Dec 10 2020 Christopher Engelhard <ce@lcts.de> - 20.0.3-1
-- Update to 20.0.3
-
-* Thu Nov 19 2020 Christopher Engelhard <ce@lcts.de> - 20.0.2-1
-- Update to 20.0.2
-
-* Sat Nov 14 2020 Christopher Engelhard <ce@lcts.de> - 20.0.2-0.1.rc1
-- Update to 20.0.2RC1
-
-* Wed Nov 11 2020 Christopher Engelhard <ce@lcts.de> - 20.0.1-3
-- Remove CentOS/RHEL 7 support from spec file
-
-* Tue Nov 10 2020 Christopher Engelhard <ce@lcts.de> - 20.0.1-2
-- Add dependencies on php-cli (for occ) and php-process (for posix)
-- Remove unneeded BR on php-cli
-- Add patch to allow updates across more than one major version
-
-* Mon Oct 26 2020 Christopher Engelhard <ce@lcts.de> - 20.0.1-1
-- Update to Nextcloud 20.0.1
-
-* Sun Oct 11 2020 Christopher Engelhard <ce@lcts.de> - 20.0.0-1
-- Update to Nextcloud 20.0.0
-
-* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 19.0.0-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
-
-* Sun Jun 28 2020 Ivan Chavero <ichavero@redhat.com> - 19.0.0-1
-- Update to Nextcloud 19.0.0
-- Update licenses
-
-* Thu Apr 30 2020 Ivan Chavero <ichavero@redhat.com> - 18.0.4-1
-- Update to Nextcloud 18.0.4
-
-* Sat Feb 08 2020 Ivan Chavero <ichavero@redhat.com> - 18.0.0-1
-- Refactor spec file
-- Update to Nextcoud 18.0.0
-
-* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-9
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
-
-* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-8
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-7
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
-* Wed Jan  9 2019 Remi Collet <remi@remirepo.net> - 10.0.4-6
-- drop dependency on php-password-compat #1658730
-- allow php-smbclient 1.0.0 #1663672
-- allow doctrine/dbal 2.x
-
-* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-5
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
-* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
-
-* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 10.0.4-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
-
-* Sat Mar 25 2017 Shawn Iwinski <shawn.iwinski@gmail.com> - 10.0.4-2
-- Add max versions to dependencies to limit each to 1 major version
-- Update some dependencies to use php-composer(*) instead of package names
-- Prepare for php-composer(google/apiclient) version 2 and new version 1 package
-
-* Tue Feb 28 2017 James Hogarth <james.hogarth@gmail.com> - 10.0.4-1
-- update to 10.0.4
-- Add migration from owncloud documentation
-- Add systemd timer for background jobs
-
-* Wed Feb 08 2017 James Hogarth <james.hogarth@gmail.com> - 10.0.3-1
-- update to 10.0.3
-
-* Thu Oct 06 2016 James Hogarth <james.hogarth@gmail.com> - 10.0.1-1
-- update to 10.0.1
-
-* Mon Aug 01 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-5
-- Use lua to have a common srpm between epel7 and fedora
-
-* Fri Jul 29 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-4
-- Don't unbundle javascript on EPEL7 due to versioning issues
-
-* Fri Jul 29 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-3
-- Unbundle javascript libraries from core where possible
-
-* Tue Jul 26 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-2
-- Update the autoloader to use the path from the approved package
-
-* Tue Jul 19 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.53-1
-- New release 9.0.53
-
-* Thu Jul 14 2016 James Hogarth <james.hogarth@gmail.com> - 9.0.52-1
-- Initial nextcloud build
+%autochangelog

sources

@@ -1 +1 @@
-SHA512 (nextcloud-20.0.5.tar.bz2) = 8839795e0c31c0bb264888f55c189214b802bc50e096af90530b4ef395e54a29bd3b9a7de5bfabc314ded61fd8ddf79c7d445b4277a46bb342f4273c64bd0219
+SHA512 (nextcloud-20.0.11.tar.bz2) = 4863a7819a564655db0a7b49a7ca9be642ab5383cdeada5c3ce6fc4529fda522a4427eb4b3ba5e00e4719232fed6c1f9e606e11f38c35f8838f82247359f335b