Date: Wed, 31 Aug 2022 22:43:09 GMT From: Ashish SHUKLA <ashish@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 46eb6e07f37e - main - security/vuxml: Document Matrix clients' vulnerabilities Message-ID: <202208312243.27VMh9n7027331@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by ashish: URL: https://cgit.FreeBSD.org/ports/commit/?id=46eb6e07f37e21a4f1aef6645112630ade8bea81 commit 46eb6e07f37e21a4f1aef6645112630ade8bea81 Author: Ashish SHUKLA <ashish@FreeBSD.org> AuthorDate: 2022-08-31 22:32:45 +0000 Commit: Ashish SHUKLA <ashish@FreeBSD.org> CommitDate: 2022-08-31 22:37:41 +0000 security/vuxml: Document Matrix clients' vulnerabilities --- security/vuxml/vuln-2022.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index cd5ccc87984e..0248ee9e5271 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,38 @@ + <vuln vid="e4d93d07-297a-11ed-95f8-901b0e9408dc"> + <topic>Matrix clients -- several vulnerabilities</topic> + <affects> + <package> + <name>cinny</name> + <range><lt>2.1.3</lt></range> + </package> + <package> + <name>element-web</name> + <range><lt>1.11.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Matrix developers report:</p> + <blockquote cite="https://matrix.org/blog/2022/08/31/security-releases-matrix-js-sdk-19-4-0-and-matrix-react-sdk-3-53-0">; + <p>The vulnerabilities give an adversary who you share a + room with the ability to carry out a denial-of-service + attack against the affected clients, making it not show all + of a user's rooms or spaces and/or causing minor temporary + corruption.</p> + </blockquote> + </body> + </description> + <references> + <cvename>2022-36059</cvename> + <cvename>2022-36060</cvename> + <url>https://matrix.org/blog/2022/08/31/security-releases-matrix-js-sdk-19-4-0-and-matrix-react-sdk-3-53-0</url>; + </references> + <dates> + <discovery>2022-08-31</discovery> + <entry>2022-08-31</entry> + </dates> + </vuln> + <vuln vid="f2043ff6-2916-11ed-a1ef-3065ec8fd3ec"> <topic>chromium -- multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202208312243.27VMh9n7027331>