diff options
| author | Ashish SHUKLA <ashish@FreeBSD.org> | 2022-08-31 22:32:45 +0000 |
|---|---|---|
| committer | Ashish SHUKLA <ashish@FreeBSD.org> | 2022-08-31 22:37:41 +0000 |
| commit | 46eb6e07f37e21a4f1aef6645112630ade8bea81 (patch) | |
| tree | bd7971f36aff35ae63bc3b095c9d54e2a05ddd1f | |
| parent | net/chrony: update to 4.3 (diff) | |
security/vuxml: Document Matrix clients' vulnerabilities
| -rw-r--r-- | security/vuxml/vuln-2022.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index cd5ccc87984e..0248ee9e5271 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,38 @@ + <vuln vid="e4d93d07-297a-11ed-95f8-901b0e9408dc"> + <topic>Matrix clients -- several vulnerabilities</topic> + <affects> + <package> + <name>cinny</name> + <range><lt>2.1.3</lt></range> + </package> + <package> + <name>element-web</name> + <range><lt>1.11.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Matrix developers report:</p> + <blockquote cite="https://matrix.org/blog/2022/08/31/security-releases-matrix-js-sdk-19-4-0-and-matrix-react-sdk-3-53-0"> + <p>The vulnerabilities give an adversary who you share a + room with the ability to carry out a denial-of-service + attack against the affected clients, making it not show all + of a user's rooms or spaces and/or causing minor temporary + corruption.</p> + </blockquote> + </body> + </description> + <references> + <cvename>2022-36059</cvename> + <cvename>2022-36060</cvename> + <url>https://matrix.org/blog/2022/08/31/security-releases-matrix-js-sdk-19-4-0-and-matrix-react-sdk-3-53-0</url> + </references> + <dates> + <discovery>2022-08-31</discovery> + <entry>2022-08-31</entry> + </dates> + </vuln> + <vuln vid="f2043ff6-2916-11ed-a1ef-3065ec8fd3ec"> <topic>chromium -- multiple vulnerabilities</topic> <affects> |