OPENSUSE-SU-2024:13320-1 matrix-synapse-1.94.0-2.1 on GA media

These are all security issues fixed in the matrix-synapse-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13039-1 matrix-synapse-1.85.2-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.85.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12160-1 matrix-synapse-1.61.1-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.61.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11649-1 matrix-synapse-1.47.1-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.47.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11041-1 matrix-synapse-1.43.0-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.43.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13270-1 matrix-synapse-1.93.0-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.93.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-7453 · Unknown · Matrix-React-Sdk

Name of the Vulnerable Software and Affected Versions: matrix-react-sdk versions 3.18.0 through 3.101.9 Description: The issue is related to insufficient protection of service data, allowing a malicious homeserver to potentially steal message keys for a room when a user invites another user to th...

jenkins-2-plugins: matrix-project plugin path traversal vulnerability

A flaw was found in The Matrix Project Plugin for Jenkins, which does not sanitize user-defined axis names of multi-configuration projects submitted through the config.xml REST API endpoint. This issue may allow attackers with Item/Configure permission to create or replace any config.xml file on...

jenkins-2-plugins: matrix-project plugin path traversal vulnerability

A flaw was found in The Matrix Project Plugin for Jenkins, which does not sanitize user-defined axis names of multi-configuration projects submitted through the config.xml REST API endpoint. This issue may allow attackers with Item/Configure permission to create or replace any config.xml file on...

jenkins-2-plugins: matrix-project plugin path traversal vulnerability

A flaw was found in The Matrix Project Plugin for Jenkins, which does not sanitize user-defined axis names of multi-configuration projects submitted through the config.xml REST API endpoint. This issue may allow attackers with Item/Configure permission to create or replace any config.xml file on...

SUSE CVE-2022-39250

Matrix JavaScript SDK is the Matrix Client-Server software development kit SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver could interfere with the verification flow between two users, injecting its own cross-signing user identity in place of one o...

The vulnerability of the vfio_ap_mdev_filter_matrix() function in the driver of the cryptographic device for the IBM S/390 platform’s Linux kernel allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function vfioapmdevfiltermatrix in the driver drivers/s390/crypto/vfioapops.c of the IBM S/390 cryptographic device driver for the Linux operating system is related to insufficient control over the information transmitted to users. Exploiting this vulnerability could allo...

Fedora: Security Advisory for matrix-synapse (FEDORA-2024-7be0693731)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-d408b654d6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-3ff83cb806)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-40175

Name of the Vulnerable Software and Affected Versions: eZ Publish Legacy affected versions not specified Description: The issue concerns several security improvements in eZ Publish Legacy, including increasing the randomness of pseudo-random bytes used for the "forgot password" feature, enhancing...

CVE-2024-34353

The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides ...

CVE-2024-34353: Insertion of Sensitive Information into Log File

The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides ...

Matrix 日志信息泄露漏洞

Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. A log message disclosure vulnerability exists in Matrix versions prior to 0.7.1 that stems from key sharing between user devices and providing redundant copies in the event that all devices are lost...

GHSA-9GGC-845V-GCGV matrix-sdk-crypto contains a log exposure of private key of the server-side key backup

Introduction In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides a redundant copy in case all devices are lost. The key backup uses asymmetric cryptography, with each server-side key backup assign...