Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:1767-1

Опубликовано: 20 июн. 2018
Источник: suse-cvrf

Описание

Security update for matrix-synapse

This update for matrix-synapse fixes the following security issue:

  • CVE-2018-12291: visibility rules were not applied correctly in the get_missing_events federation API (boo#1096833)

Список пакетов

openSUSE Leap 15.0
matrix-synapse-0.28.1-lp150.2.4.1
matrix-synapse-test-0.28.1-lp150.2.4.1
python2-matrix-synapse-0.28.1-lp150.2.4.1
python3-matrix-synapse-0.28.1-lp150.2.4.1

Ссылки

Описание

The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.

Затронутые продукты
openSUSE Leap 15.0:matrix-synapse-0.28.1-lp150.2.4.1
openSUSE Leap 15.0:matrix-synapse-test-0.28.1-lp150.2.4.1
openSUSE Leap 15.0:python2-matrix-synapse-0.28.1-lp150.2.4.1
openSUSE Leap 15.0:python3-matrix-synapse-0.28.1-lp150.2.4.1
Ссылки