-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 18 Nov 2019 11:36:23 +0100 Binary: matrix-synapse Source: matrix-synapse Architecture: all source Version: 1.5.1-1~bpo10+1 Distribution: buster-backports Urgency: high Maintainer: Matrix Packaging Team <pkg-matrix-maintainers@lists.alioth.debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Closes: 944355 Description: matrix-synapse - Matrix reference homeserver Changes: matrix-synapse (1.5.1-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. . matrix-synapse (1.5.1-1) unstable; urgency=high . * New upstream release. . matrix-synapse (1.5.0-1) unstable; urgency=medium . * New upstream release (Closes: #944355). * SECURITY UPDATE (CVE-2019-18835): - Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers. * Require python3-typing-extensions (>= 3.7.4). * Use secure copyright file specification URI. . matrix-synapse (1.4.0-1) unstable; urgency=medium . * New upstream release. * Bump Twisted requirement. Checksums-Sha1: 7993b9497c4235912958a6e32b29788a0be000c3 2681 matrix-synapse_1.5.1-1~bpo10+1.dsc 045f22a1188f8aa9f8c26c9d957bbde17c59d764 89636 matrix-synapse_1.5.1-1~bpo10+1.debian.tar.xz 03883b14ef01d18f5122c014ed15c0d0904b63a3 876764 matrix-synapse_1.5.1-1~bpo10+1_all.deb 0c09a7277da000ed9c1d13ef4d90b40a3f8a0037 9438 matrix-synapse_1.5.1-1~bpo10+1_amd64.buildinfo Checksums-Sha256: 1b9590e8868247ecd0058ae2c0380c796791cc9ed6c33d5197d1be47a106074c 2681 matrix-synapse_1.5.1-1~bpo10+1.dsc 01700db13e701a31a05075b7e43fb53eebdb6f5218efa3aa665e6ae2b2f9d17e 89636 matrix-synapse_1.5.1-1~bpo10+1.debian.tar.xz 3bf077c91ed3b4246a5080cfe0dc6ddfd7f1a9b851930fdf3de4fdf5a8bf2704 876764 matrix-synapse_1.5.1-1~bpo10+1_all.deb 1159fe7deeafbc02438d296db4d4d0db1d05748423d080afabcb068cd0be6c81 9438 matrix-synapse_1.5.1-1~bpo10+1_amd64.buildinfo Files: 2ece2055b9b057cd16948ffda21cb8e1 2681 net optional matrix-synapse_1.5.1-1~bpo10+1.dsc 4a92ec3fd122bc61fdc52de1289ee340 89636 net optional matrix-synapse_1.5.1-1~bpo10+1.debian.tar.xz 389cd29b4499ae56ff7ccad63c51fa84 876764 net optional matrix-synapse_1.5.1-1~bpo10+1_all.deb 24c29f77959767e8bdf41cad21272a0a 9438 net optional matrix-synapse_1.5.1-1~bpo10+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl3dgO0ACgkQXkCM2RzY OdJ6lQgAuRJCshTK08hndfoDP/7YnQ1gdt2PAwm4+d3jeDG7uD30Nhw6T65Pwj8E h2XyXPSIl2e04uBu5pJndDX93vsgiyd2Nft3/v/O9L4N7TwK3qTEpjtzCONc9c9+ XUMQrWWxsA9S1j51OEwTH5uczN4bH+2W+O6RxQmMzlIZX3WI+aXclGPF3IPlCUeX wrUDWd4nQ4ZrDK3ooJtLHeKlQ5d5/u1QdY0jqqE5sQYjV8OVx0bJxoLiDpv5j1Ln Odkbj0shK9Voy4+7lKqyueWfUI2//XFgMVx7gjHRFctY3N//Brb8pPBzvA97drA4 j19VxbPn+zxnCOkdpa79tAXxgqLksg== =HGgi -----END PGP SIGNATURE-----
