Lucene search

K
fedoraFedoraFEDORA:DE24A30AA46F
HistorySep 08, 2021 - 3:07 p.m.

[SECURITY] Fedora 34 Update: matrix-synapse-1.41.1-1.fc34

2021-09-0815:07:22
lists.fedoraproject.org
9
matrix ecosystem
federated instant messaging
voip
synapse "homeserver" implementation
open source
python
twisted
homeserver
matrix concept
unix

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.6

Confidence

High

EPSS

0.001

Percentile

49.7%

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference “homeserver” implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in the context of a coded base and let you run your own homeserver and generally help bootstrap the ecosystem.

OSVersionArchitecturePackageVersionFilename
Fedora34anymatrix-synapse< 1.41.1UNKNOWN

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.6

Confidence

High

EPSS

0.001

Percentile

49.7%