[Git][security-tracker-team/security-tracker][master] new matrix-synapse issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
149b237f by Moritz Muehlenhoff at 2024-04-24T10:14:52+02:00
new matrix-synapse issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -65,7 +65,9 @@ CVE-2024-32258 (The network server of fceux 2.7.0 has a path traversal vulnerabi
 CVE-2024-31804 (An unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.2 ...)
 	NOT-FOR-US: Terratec
 CVE-2024-31208 (Synapse is an open-source Matrix homeserver. A remote Matrix user with ...)
-	TODO: check
+	- matrix-synapse <unfixed>
+	NOTE: https://github.com/element-hq/synapse/security/advisories/GHSA-3h7q-rfh9-xm4v
+	NOTE: https://github.com/element-hq/synapse/commit/55b0aa847a61774b6a3acdc4b177a20dc019f01a (v1.105.1)
 CVE-2024-30800 (PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly z ...)
 	NOT-FOR-US: PX4 Autopilot
 CVE-2024-2477 (The wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site S ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/149b237f08488a6468c09e0fc736da89b59057b1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/149b237f08488a6468c09e0fc736da89b59057b1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240424/1dad86ec/attachment.htm>