[Pkg-matrix-maintainers] matrix-synapse_1.2.1-1_source.changes ACCEPTED into unstable

Debian FTP Masters ftpmaster at ftp-master.debian.org
Fri Jul 26 17:19:42 BST 2019



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 26 Jul 2019 13:02:23 -0300
Source: matrix-synapse
Architecture: source
Version: 1.2.1-1
Distribution: unstable
Urgency: high
Maintainer: Matrix Packaging Team <pkg-matrix-maintainers at lists.alioth.debian.org>
Changed-By: Andrej Shadura <andrewsh at debian.org>
Changes:
 matrix-synapse (1.2.1-1) unstable; urgency=high
 .
   * New upstream release.
   * Drop an old patch.
   * SECURITY UPDATE:
     - Prevent an attack where a federated server could send redactions
       for arbitrary events in v1 and v2 rooms.
     - Prevent a denial-of-service attack where cycles of redaction events
       would make Synapse spin infinitely.
     - Prevent an attack where users could be joined or parted from public
       rooms without their consent.
     - Fix a vulnerability where a federated server could spoof read
       receipts from users on other servers.
Checksums-Sha1:
 e7b052d4d57e63db8ef747855d112f8a74aca300 2603 matrix-synapse_1.2.1-1.dsc
 8f027cb9ce7a9a3197abb39ae248f3071438a0cc 1371041 matrix-synapse_1.2.1.orig.tar.gz
 4c6ae81edaebb89ec0672f7822b71c47079fbea3 89704 matrix-synapse_1.2.1-1.debian.tar.xz
Checksums-Sha256:
 43fc02e18d3d0ceabd1b2dfd1e9f4b82827635cf5c8886ffdc0f0968efe068e7 2603 matrix-synapse_1.2.1-1.dsc
 172f1b9930af5ebf4b56a85bbb24f5a19fdabaa863c846133ebb1b8496458302 1371041 matrix-synapse_1.2.1.orig.tar.gz
 89af387b75fbd06525fef060de3ab9e7ad896af09d61423b67335271f7683048 89704 matrix-synapse_1.2.1-1.debian.tar.xz
Files:
 ee843a4b292a8bcf2f324e737895843b 2603 net optional matrix-synapse_1.2.1-1.dsc
 e6e005ec360ccd1fa27ff33e15eb78ab 1371041 net optional matrix-synapse_1.2.1.orig.tar.gz
 095f9459b161f97331d63269e80b8010 89704 net optional matrix-synapse_1.2.1-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl07JG0ACgkQXkCM2RzY
OdKUmwf/fJG/T4IXK0XLPVTvFN9iLbF8YHcg4F7qvVzpVu+Ntqk9KFwTphS7qNjB
xdABFgbLbWLiV3H3ZUnlOuEoWQjL9Y5wbRTd0UMwV7xM1gj3uHn3eVmPJN3vthbs
NE3TbXiVNK4yW5KDMGJnRxJSuDrdSWZkNd6JvIgqIvc204pN85etEdXVoF6TkACB
CY+TrfnCmHeUoPHr7BgMzVgfakNoA2uPOf2uu1flIo1sqIEP75CQ6vcfeaIMSDoe
4/ZCiZquJFef9GCeKSXq829eVp1ebeYt4E6h8HJHaFX0AoWXNhS/Wg1f0JkZmvsY
IlDpg4kkeQiHDyOOC0D7j1ijUNSlSg==
=5Zpv
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.



More information about the Pkg-matrix-maintainers mailing list