FEDORA-2019-80f1943143 created by jcline 9 months ago for Fedora 30
stable

This release includes four security fixes:

  • Prevent an attack where a federated server could send redactions for arbitrary events in v1 and v2 rooms.
  • Prevent a denial-of-service attack where cycles of redaction events would make Synapse spin infinitely.
  • Prevent an attack where users could be joined or parted from public rooms without their consent.
  • Fix a vulnerability where a federated server could spoof read-receipts from users on other servers.

See https://github.com/matrix-org/synapse/releases/tag/v1.2.1 for complete details.

How to install

sudo dnf upgrade --advisory=FEDORA-2019-80f1943143

This update has been submitted for testing by jcline.

9 months ago

This update's test gating status has been changed to 'waiting'.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has been pushed to testing.

9 months ago
User Icon dcallagh commented & provided feedback 9 months ago
karma

Working well on my matrix homeserver

BZ#1726902 matrix-synapse-1.1.0 is available

This update can be pushed to stable now if the maintainer wishes

8 months ago

This update has been submitted for stable by bodhi.

8 months ago

This update has been pushed to stable.

8 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
2
Stable by Time
7 days
Dates
submitted
9 months ago
in testing
9 months ago
in stable
8 months ago
BZ#1726902 matrix-synapse-1.1.0 is available
0
1

Automated Test Results