vulnerability

FreeBSD: VID-ED8CBAD5-21A8-11EA-9B6D-901B0E934D69: py-matrix-synapse -- multiple vulnerabilities

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
2019-12-18
Added
2019-12-21
Modified
2025-02-19

Description



Matrix developers report:



The [synapse 1.7.1] release includes several security fixes as well


as a fix to a bug exposed by the security fixes. All previous releases


of Synapse are affected. Administrators are encouraged to upgrade as


soon as possible.



Fix a bug which could cause room events to be incorrectly authorized


using events from a different room.


Fix a bug causing responses to the /context client endpoint to not


use the pruned version of the event.


Fix a cause of state resets in room versions 2 onwards.





Solution(s)

freebsd-upgrade-package-py35-matrix-synapsefreebsd-upgrade-package-py36-matrix-synapsefreebsd-upgrade-package-py37-matrix-synapse

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.