Kenneth G. Paterson

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop Client versions 3.0.0 through 3.6.4 **Description** The issue allows a malicious server administrator to recover and modify the contents of end-to-end encrypted files. This is a significant concern for users who rely on the Nextcloud Desktop Client for synchronizing files from Nextcloud Server. **Recommendations** For Nextcloud Desktop Client versions 3.0.0 through 3.6.4, upgrade to version 3.6.5 to receive a patch. At the moment, there is no other information about additional mitigation measures for this issue.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop client versions 3.0.0 through 3.8.0 Nextcloud Android app versions 3.13.0 through 3.25.0 Nextcloud iOS app versions 3.0.5 through 4.8.0 **Description** A malicious server administrator can gain full access to an end-to-end encrypted folder, allowing them to decrypt files, recover the folder structure, and add new files. **Recommendations** For Nextcloud Desktop client versions 3.0.0 through 3.7.0, update to version 3.8.0. For Nextcloud Android app versions 3.13.0 through 3.24.0, update to version 3.25.0. For Nextcloud iOS app versions 3.0.5 through 4.7.0, update to version 4.8.0.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop Client versions 3.0.0 through 3.6.4 **Description** A malicious server administrator can gain full access to an end-to-end encrypted folder, allowing them to decrypt files, recover the folder structure, and add new files. **Recommendations** For Nextcloud Desktop Client versions 3.0.0 through 3.6.4, upgrade to version 3.6.5 to receive a patch.

**Nome do software vulnerável e versões afetadas** Versões do Telegram anteriores à 7.8.1 para Android Versões do Telegram anteriores à 7.8.3 para iOS Versões do Telegram Desktop anteriores à 2.8.8 **Descrição** Existe uma falha de reordenação no Telegram, permitindo que um invasor faça com que o servidor receba mensagens em uma ordem diferente daquela em que foram enviadas ao cliente. Essa falha pode ser explorada por um invasor, levando potencialmente a consequências indesejadas. **Recomendações** Para versões do Telegram anteriores à 7.8.1 para Android, atualize para a versão 7.8.1 ou posterior. Para versões do Telegram anteriores à 7.8.3 para iOS, atualize para a versão 7.8.3 ou posterior. Para versões do Telegram Desktop anteriores à 2.8.8, atualize para a versão 2.8.8 ou posterior.

**Name of the Vulnerable Software and Affected Versions** GnuTLS (affected versions not specified) **Description** A cache-based side channel in the GnuTLS implementation allows for plain text recovery in a cross-VM attack setting. An attacker can use a combination of "Just in Time" Prime+probe attack and Lucky-13 attack with crafted packets to recover plain text. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified) Description: The issue is related to the GnuTLS implementation of HMAC-SHA-384, which is vulnerable to a Lucky thirteen style attack. This allows remote attackers to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets. The vulnerability is due to errors in the implementation of the cryptographic algorithm, enabling an attacker to exploit it and perform attacks such as plain text recovery. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified) Description: The issue is related to the GnuTLS implementation of HMAC-SHA-256, which is vulnerable to a Lucky thirteen style attack. Remote attackers could exploit this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets. The vulnerability is associated with errors in the implementation of the cryptographic algorithm, allowing an attacker to exploit it and perform attacks such as plaintext-recovery attacks using specially crafted packets. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.