net-im

Security Bug Reports

• <net-im/prosody-0.11.11: denial-of-service vulnerability in mod_websocket (CVE-2022-0217)

  831140 - Assigned to Gentoo Security
• <net-im/pidgin-2.14.9: MITM attack possible on non-DNSSEC XMPP connections

  841611 - Assigned to Gentoo Security
• <net-im/dino-{0.3.2,0.4.2}: Insufficient message sender validation

  902877 - Assigned to Gentoo Security
• net-im/rocketchat-desktop-bin: multiple vulnerabilities

  906108 - Assigned to Gentoo Security
• net-im/rocketchat-desktop-bin: multiple vulnerabilities

  908039 - Assigned to Gentoo Security
• <net-im/synapse-1.105.1: Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage

  930514 - Assigned to Gentoo Security
• <net-im/synapse-1.120.2: Multiple vulnerabilities

  945823 - Assigned to Gentoo Security
• <net-im/synapse-1.127.1: Federation denial of service via malformed events

  952122 - Assigned to Gentoo Security
• <net-im/element-desktop-bin-1.11.103: Sender of encrypted events can be spoofed by homeserver administrator

  957802 - Assigned to Gentoo Security