Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1105a778 by Salvatore Bonaccorso at 2018-06-13T20:45:19+02:00
CVE-2018-12291/matrix-synapse assigned
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -382,7 +382,7 @@ CVE-2018-12090 (There is unauthenticated reflected
cross-site scripting (XSS) in
TODO: check
CVE-2018-12089 (In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with
Task View ...)
NOT-FOR-US: Octopus Deploy
-CVE-2018-XXXX [bug in the get_missing_events federation API where event
visibility rules were not applied correctly]
+CVE-2018-12291 [bug in the get_missing_events federation API where event
visibility rules were not applied correctly]
- matrix-synapse 0.31.1+dfsg-1 (bug #901293)
NOTE: https://github.com/matrix-org/synapse/pull/3371
NOTE:
https://github.com/matrix-org/synapse/commit/0834b49c6a9b6c597a154d4b2dfcf8fff90699ec
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1105a778639c7006d7997154e5209a6d1d2ec7f2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/1105a778639c7006d7997154e5209a6d1d2ec7f2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
