Accepted matrix-synapse 1.2.1-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 26 Jul 2019 13:02:23 -0300
Source: matrix-synapse
Architecture: source
Version: 1.2.1-1
Distribution: unstable
Urgency: high
Maintainer: Matrix Packaging Team <pkg-matrix-maintainers@lists.alioth.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
matrix-synapse (1.2.1-1) unstable; urgency=high
.
* New upstream release.
* Drop an old patch.
* SECURITY UPDATE:
- Prevent an attack where a federated server could send redactions
for arbitrary events in v1 and v2 rooms.
- Prevent a denial-of-service attack where cycles of redaction events
would make Synapse spin infinitely.
- Prevent an attack where users could be joined or parted from public
rooms without their consent.
- Fix a vulnerability where a federated server could spoof read
receipts from users on other servers.
Checksums-Sha1:
e7b052d4d57e63db8ef747855d112f8a74aca300 2603 matrix-synapse_1.2.1-1.dsc
8f027cb9ce7a9a3197abb39ae248f3071438a0cc 1371041 matrix-synapse_1.2.1.orig.tar.gz
4c6ae81edaebb89ec0672f7822b71c47079fbea3 89704 matrix-synapse_1.2.1-1.debian.tar.xz
Checksums-Sha256:
43fc02e18d3d0ceabd1b2dfd1e9f4b82827635cf5c8886ffdc0f0968efe068e7 2603 matrix-synapse_1.2.1-1.dsc
172f1b9930af5ebf4b56a85bbb24f5a19fdabaa863c846133ebb1b8496458302 1371041 matrix-synapse_1.2.1.orig.tar.gz
89af387b75fbd06525fef060de3ab9e7ad896af09d61423b67335271f7683048 89704 matrix-synapse_1.2.1-1.debian.tar.xz
Files:
ee843a4b292a8bcf2f324e737895843b 2603 net optional matrix-synapse_1.2.1-1.dsc
e6e005ec360ccd1fa27ff33e15eb78ab 1371041 net optional matrix-synapse_1.2.1.orig.tar.gz
095f9459b161f97331d63269e80b8010 89704 net optional matrix-synapse_1.2.1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl07JG0ACgkQXkCM2RzY
OdKUmwf/fJG/T4IXK0XLPVTvFN9iLbF8YHcg4F7qvVzpVu+Ntqk9KFwTphS7qNjB
xdABFgbLbWLiV3H3ZUnlOuEoWQjL9Y5wbRTd0UMwV7xM1gj3uHn3eVmPJN3vthbs
NE3TbXiVNK4yW5KDMGJnRxJSuDrdSWZkNd6JvIgqIvc204pN85etEdXVoF6TkACB
CY+TrfnCmHeUoPHr7BgMzVgfakNoA2uPOf2uu1flIo1sqIEP75CQ6vcfeaIMSDoe
4/ZCiZquJFef9GCeKSXq829eVp1ebeYt4E6h8HJHaFX0AoWXNhS/Wg1f0JkZmvsY
IlDpg4kkeQiHDyOOC0D7j1ijUNSlSg==
=5Zpv
-----END PGP SIGNATURE-----