CVE-2019-18835

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.

Severity: HIGH (7.5) Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Package keepass updated to version 2.44-alt1 for branch sisyphus in task 245114.

Update to 2.44

Package libdwarf updated to version 20200114-alt2 for branch sisyphus in task 245121.

libdwarf-devel: file conflict with libdw-devel

Package kernel-image-un-def updated to version 5.4.15-alt1 for branch sisyphus in task 245170.

Published: 2021-10-15

BDU:2021-05741

Уязвимость реализации файла исходного кода arch/powerpc/kvm/book3s_hv_rmhandlers.S ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.5) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: MEDIUM (4.6) Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C

References:

CVE-2021-43056

Published: 2021-10-28
Modified: 2024-11-21

CVE-2021-43056

An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values.

Severity: MEDIUM (4.9) Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References:

Version: 2.1.2

Branch sisyphus update on 2020-01-28

ALT-BU-2020-3620-1

ALT-PU-2020-1099-1

Closed vulnerabilities

CVE-2019-18835

ALT-PU-2020-1100-1

Closed bugs

Bug #37936

ALT-PU-2020-1102-1

Closed bugs

Bug #37935

ALT-PU-2020-1104-1

Closed vulnerabilities

BDU:2021-05741

CVE-2021-43056