[Pkg-matrix-maintainers] matrix-synapse_1.103.0-2_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 25 May 2024 16:22:51 +0200
Source: matrix-synapse
Architecture: source
Version: 1.103.0-2
Distribution: unstable
Urgency: medium
Maintainer: Matrix Packaging Team <pkg-matrix-maintainers at lists.alioth.debian.org>
Changed-By: Andrej Shadura <andrewsh at debian.org>
Closes: 1069763
Changes:
 matrix-synapse (1.103.0-2) unstable; urgency=medium
 .
   * Fix CVE-2024-31208 / GHSA-3h7q-rfh9-xm4v:
     - Weakness in auth chain indexing allows DoS from remote room members
       through disk fill and high CPU usage.
     Closes: 1069763
Checksums-Sha1:
 8938744eaeb84b9a2500a4e35809659fc6854d66 3230 matrix-synapse_1.103.0-2.dsc
 34d1e40682bcc873958c25eaa3c301ffe7d77807 128588 matrix-synapse_1.103.0-2.debian.tar.xz
Checksums-Sha256:
 ca320d936bb9ebdbf1da33cdba7a19b4853262ca8535c7f0b4a0022583d9ca9d 3230 matrix-synapse_1.103.0-2.dsc
 fa7e9139e75fa41ac022ff60d7ac61051c61e0e4a1ee82827737d85eb245a3ab 128588 matrix-synapse_1.103.0-2.debian.tar.xz
Files:
 1da88fab329d4ae0d40003365b9c292d 3230 net optional matrix-synapse_1.103.0-2.dsc
 3eb711c8d2880d002c0d0077bb7ee75c 128588 net optional matrix-synapse_1.103.0-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCZlH0jQAKCRDoRGtKyMdy
YU0lAP0ZwHjsRLQL4zAAb+aiTBNCJcu7mxoHLILaOFIO3TCYnAD/TDmC+KZ+ONXC
BfUB6kWJYvyL7vyzcuJ51+TkpkpEHAQ=
=xrQH
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-matrix-maintainers/attachments/20240525/d7d51e6b/attachment.sig>