From 3cb5be8c9c1af51e6e27236234c44b3b87b1b125 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Damir=20Jeli=C4=87?= Date: Mon, 8 Dec 2025 12:44:36 +0100 Subject: [PATCH] Add CVE-2025-66622 for matrix-sdk-base --- crates/matrix-sdk-base/RUSTSEC-0000-0000.md | 22 +++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 crates/matrix-sdk-base/RUSTSEC-0000-0000.md diff --git a/crates/matrix-sdk-base/RUSTSEC-0000-0000.md b/crates/matrix-sdk-base/RUSTSEC-0000-0000.md new file mode 100644 index 00000000..0c15115b --- /dev/null +++ b/crates/matrix-sdk-base/RUSTSEC-0000-0000.md @@ -0,0 +1,22 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "matrix-sdk-base" +date = "2025-12-08" +url = "https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-jj6p-3m75-g2p3" +aliases = ["CVE-2025-66622", "GHSA-jj6p-3m75-g2p3"] + +categories = ["denial-of-service"] + +[versions] +patched = [">= 0.16.0"] +``` + +# matrix-sdk-base: Denial of service due to custom `m.room.join_rules` events + +The matrix-sdk-base crate is unable to handle responses that include custom +m.room.join_rules values due to a serialization bug. + +This can be exploited to cause a denial-of-service condition, if a user is +invited to a room with non-standard join rules, the crate's sync process will +stall, preventing further processing for all rooms.