MirrorHub/synapse
0
0
Fork 1
mirror of https://mau.dev/maunium/synapse.git synced 2024-12-14 18:33:51 +01:00
Code Issues Projects Releases Wiki Activity

Add security advisory note to the changelog

Browse source
This commit is contained in:
Olivier Wilkinson (reivilibre) 2023-10-10 13:20:59 +01:00
parent 25c412b3c5
commit 4f87edc6e8
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
CHANGES.md
View file

@ -1,6 +1,19 @@
# Synapse 1.94.0 (2023-10-10) # Synapse 1.94.0 (2023-10-10)
No significant changes since 1.94.0rc1. No significant changes since 1.94.0rc1.
However, please take note of the security advisory that follows.
## Security advisory
The following issue is fixed in 1.94.0 (and RC).
- [GHSA-5chr-wjw5-3gq4](https://github.com/matrix-org/synapse/security/advisories/GHSA-5chr-wjw5-3gq4) — Moderate Severity
A malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service.
Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected.
See the advisory for more details. If you have any questions, email security@matrix.org.
# Synapse 1.94.0rc1 (2023-10-03) # Synapse 1.94.0rc1 (2023-10-03)