stable
FEDORA-2019-80f1943143 created by jcline 3 years ago for Fedora 30

This release includes four security fixes:

  • Prevent an attack where a federated server could send redactions for arbitrary events in v1 and v2 rooms.
  • Prevent a denial-of-service attack where cycles of redaction events would make Synapse spin infinitely.
  • Prevent an attack where users could be joined or parted from public rooms without their consent.
  • Fix a vulnerability where a federated server could spoof read-receipts from users on other servers.

See https://github.com/matrix-org/synapse/releases/tag/v1.2.1 for complete details.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2019-80f1943143

This update has been submitted for testing by jcline.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago
User Icon dcallagh commented & provided feedback 3 years ago
karma

Working well on my matrix homeserver

BZ#1726902 matrix-synapse-1.1.0 is available

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
2
Stable by Time
7 days
Dates
submitted
3 years ago
in testing
3 years ago
in stable
3 years ago
BZ#1726902 matrix-synapse-1.1.0 is available
0
1

Automated Test Results