[Git][security-tracker-team/security-tracker][master] Add new matrix-synapse issue

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7c2acc09 by Salvatore Bonaccorso at 2018-06-11T06:51:09+02:00
Add new matrix-synapse issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,8 @@
+CVE-2018-XXXX [bug in the get_missing_events federation API where event visibility rules were not applied correctly]
+	- matrix-synapse 0.31.1+dfsg-1
+	NOTE: https://github.com/matrix-org/synapse/pull/3371
+	NOTE: https://github.com/matrix-org/synapse/commit/0834b49c6a9b6c597a154d4b2dfcf8fff90699ec
+	NOTE: https://matrix.org/blog/2018/06/08/synapse-0-31-1-released/
 CVE-2018-12088 [bug in checksumming function; prone to replay attacks]
 	- s3ql 2.27.1+dfsg-1
 	NOTE: https://groups.google.com/forum/#!topic/s3ql/4TzCVIMkA4o



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c2acc0941da9a2404adaeac552c9bc8830bbd51

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c2acc0941da9a2404adaeac552c9bc8830bbd51
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180611/ccf997d7/attachment-0001.html>