Pre-disclosure: Upcoming coordinated security fix for all Matrix server implementations (matrix.org)

submitted 1 week ago by [email protected] to c/[email protected]

2 comments fedilink hide all child comments

Just in case you don't know.

Development teams of all known Matrix server implementations were already invited to a room to speak about it by the Matrix team in charge of it.

This includes Conduit forks.

you are viewing a single comment's thread
view the rest of the comments

[-] [email protected] 1 points 1 week ago

Will Dendrite be patched?

[-] [email protected] 2 points 1 week ago* (last edited 1 week ago)

I expect it so. But also involve room admins because part of the solution is that room creators will have now infinite privilege over other admins.

It makes me feel like their idea of decentralized rooms did not work really well for privileges and that is where vulnerability goes.

Also, Space are rooms too and since 2021 there is an issue open related to upgrading Spaces and now may be a big concern since it is not supported completely.

Edited: https://github.com/element-hq/element-meta/issues/1961#issuecomment-3083005443

this post was submitted on 16 Jul 2025

30 points (100.0% liked)

Matrix

3655 readers

7 users here now

An open network for secure, decentralized communication

founded 5 years ago

MODERATORS

[email protected]