[Git][security-tracker-team/security-tracker][master] Add CVE-2021-2133{2,3}/matrix-synapse

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0ada35e7 by Salvatore Bonaccorso at 2021-03-27T10:04:57+01:00
Add CVE-2021-2133{2,3}/matrix-synapse

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19179,9 +19179,11 @@ CVE-2021-21334 (In containerd (an industry-standard container runtime) before ve
 	- containerd 1.4.4~ds1-1
 	NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-6g2q-w5j3-fwh4
 CVE-2021-21333 (Synapse is a Matrix reference homeserver written in python (pypi packa ...)
-	TODO: check
+	- matrix-synapse 1.27.0-1
+	NOTE: https://github.com/matrix-org/synapse/security/advisories/GHSA-c5f8-35qr-q4fm
 CVE-2021-21332 (Synapse is a Matrix reference homeserver written in python (pypi packa ...)
-	TODO: check
+	- matrix-synapse 1.27.0-1
+	NOTE: https://github.com/matrix-org/synapse/security/advisories/GHSA-246w-56m2-5899
 CVE-2021-21331 (The Java client for the Datadog API before version 1.0.0-beta.9 has a  ...)
 	NOT-FOR-US: Java client for Datadog API
 CVE-2021-21330 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ada35e7540cef8d3a7b007e9aaff48a46e8a8f6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ada35e7540cef8d3a7b007e9aaff48a46e8a8f6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210327/00683f0d/attachment.htm>