DEBIAN-CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

CVE-2025-61672 Synapse: Invalid device keys degrade federation functionality

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

matrix-synapse-1.139.1-1.1 on GA media (moderate)

matrix-synapse-1.139.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15603-1 Rating: moderate Cross-References: CVE-2025-61672 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...