Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 19 Sep 2020 22:27:07 +0000
From:      bugzilla-noreply@freebsd.org
To:        python@FreeBSD.org
Subject:   [Bug 249375] net-im/py-matrix-synapse: Update to 1.19.3
Message-ID:  <bug-249375-21822-imNyhLZRw9@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-249375-21822@https.bugs.freebsd.org/bugzilla/>
References:  <bug-249375-21822@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D249375

--- Comment #11 from Danilo G. Baio <dbaio@freebsd.org> ---
(In reply to Denis Kasak from comment #10)

Usually the project (matrix-org/synapse) documents its security issues, they
didn't with this.

"malformed events may prevent users from joining federated rooms"
this looks like a simple bug to me.

That's why I understood that there is no security implication here.

I'm not a synapse user, so I can be wrong, and I'll be happy in push a vuxml
entry, but we will need to improve that wording a little.

Regards.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-249375-21822-imNyhLZRw9>