CVE catalog

CVE-2025-61672

UBUNTU-CVE-2025-61672

[CVE catalog]

Severity
Medium · CVSS 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 25, 2026

These are all security issues fixed in the matrix-synapse-1.139.1-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensusematrix-synapsetumbleweed1.139.1-1.1fixed
Ubuntumatrix-synapsepro1.39.0-1vulnerable
Ubuntumatrix-synapsepro1.47.0-2vulnerable
Ubuntumatrix-synapsepro1.47.1-1vulnerable
Ubuntumatrix-synapsepro1.48.0-1vulnerable
Ubuntumatrix-synapsepro1.49.0-1vulnerable
Ubuntumatrix-synapsepro1.49.2-1vulnerable
Ubuntumatrix-synapsepro1.50.1-1vulnerable
Ubuntumatrix-synapsepro1.50.2-1vulnerable
Ubuntumatrix-synapsepro1.51.0-1vulnerable
Ubuntumatrix-synapsepro1.52.0-1vulnerable
Ubuntumatrix-synapsepro1.53.0-1vulnerable
Ubuntumatrix-synapsepro1.53.0-1ubuntu0.1~esm2vulnerable
Ubuntumatrix-synapse24.041.90.0-1vulnerable
Ubuntumatrix-synapse24.041.100.0-1ubuntu1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensusematrix-synapserpmtumbleweed1.139.1-1.1Not reportedOPENSUSE-SU-2025:15603-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [matrix-synapse]Fixed

    Source package: [matrix-synapse]

    Details (1)

    • 1.159.0-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 1.139.1-1.1

      pypi · matrix-synapse · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]