Upcoming Coordinated Security Fix for Matrix Server Implementations
By
notpushkin
A bagel you'd recommend to a friend without hedging.
Summary
A major project has been conducted by the Element server team and the Matrix.org Foundation security team to investigate state resets in Matrix server implementations, leading to the identification of two high severity protocol vulnerabilities.
Key quotes
· 3 pulledOver the last 6 months a major project has been underway by the Element server team and the Matrix.org Foundation security team to investigate “state resets”: scenarios where Matrix’s state resolution algorithm can give unexpected results.
Given the security implications of a federation protocol vulnerability, we’ve shared details under embargo over the last 4 weeks with all known active server implementations, and are now aiming for a coordinated security fix.
We’ve identified two high severity protocol vulnerabilities (CVE-2025-49090; the other not yet allocated a CVE).
You might also wanna read
Researchers Work to Decode the "Black Box" of Reservoir Computing and Brain-Inspired AI
This article explores Reservoir Computing (RC), a specialized form of recurrent neural networks (RNNs) that mimics biological brain processe
akmaier.substack.com·39m ago
Experimental demonstration of quantum communication advantage for Euclidean distance calculation using coherent state fingerprints
This paper presents an experimental demonstration of quantum advantage in communication complexity for the Euclidean distance problem. The r
arxiv.org·1h ago
Quantum research reveals when entanglement hinders rather than helps channel discrimination
This research paper investigates the role of entanglement in quantum channel discrimination, challenging the common assumption that more ent
arxiv.org·1h ago
Florida community Angeline installs AI-powered robotic beehive to protect pollinators
A Pasco County, Florida community called Angeline has installed a robotic beehive system equipped with AI technology, becoming the first mas
baynews9.com·2h ago
Study Finds Most AI Chatbots Prioritize Ad Revenue Over User Welfare in Conflict-of-Interest Scenarios
This research paper analyzes how large language models (LLMs) handle conflicts of interest when company revenue incentives (advertisements)
arxiv.org·2h ago
German study finds POLO back-junction solar cells more cost-effective than PERC technology in Europe
A German research team from the German Aerospace Center (DLR) conducted a techno-economic analysis of POLO back-junction (BJ) solar cells in
pv-magazine.com·2h ago