CVE-2025-65104

A flaw was found in the Firebird client library. When an older version of the client library communicates with newer Firebird servers, it places incorrect data length values into XSQLDA fields. This vulnerability can lead to an information leak, potentially exposing sensitive data...

py-matrix-synapse -- malformed events may prevent users from joining federated rooms

Problem Description: Affected Synapse versions assume that all events have an "origin" field set. If an event without the "origin" field is sent into a federated room, servers not already joined to the room will be unable to do so due to failing to fetch the malformed event. Impact: An attacker...