-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 16 Sep 2020 17:48:59 +0300 Source: matrix-synapse Architecture: source Version: 1.19.1-1~bpo10+2 Distribution: buster-backports Urgency: high Maintainer: Matrix Packaging Team <pkg-matrix-maintainers@lists.alioth.debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Changes: matrix-synapse (1.19.1-1~bpo10+2) buster-backports; urgency=high . * Backport an upstream security bug: - Don't assume that an event has an origin field (See: https://github.com/matrix-org/synapse/issues/8319) Checksums-Sha1: a04e3ec0e2669fbc87513f193b8b7117a959320d 2683 matrix-synapse_1.19.1-1~bpo10+2.dsc b711d806fe4ccf3b2ca1d8331095b0dfaedf2a8a 106448 matrix-synapse_1.19.1-1~bpo10+2.debian.tar.xz Checksums-Sha256: 9afda4aaf8870b3c3d66995d1de2990711a1a2f1bc38539692e8b30e8f356dff 2683 matrix-synapse_1.19.1-1~bpo10+2.dsc 187763e3ad4137fb20ae4400c507b19b4c758d56bb1e27080a1fec2845267982 106448 matrix-synapse_1.19.1-1~bpo10+2.debian.tar.xz Files: 85ff75cf2b7637cee77c0c7955b3fede 2683 net optional matrix-synapse_1.19.1-1~bpo10+2.dsc 4d502d6b407a61988e9e28d017d26532 106448 net optional matrix-synapse_1.19.1-1~bpo10+2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl9iJicACgkQXkCM2RzY OdK7JQf+LZiDrp14S/XgEXQpraYLjZJIv/UNC35+h1b0aZ4yRJYuGXIL5fMqCYYA 8q/6rQqOrgYVy/5qlqVGEVqx6jfZcJlGQVWE1dRDzNVx+qvzmfR0Y/1IbAYCucZl hgLMBZJShImTwq3Q61xZHnMT8i0Kl4kfN2fiIacc+lfppmM46Ykk5IrnYZqINqUO KPDCdA75TjlkUe4t+dGlVcYPhNbOc4lTb395a30cUIR8vlp6s7MDTeQzla3I9iDd xGl/gu5VMldpBCjb8m4weWNjU2qY2ojYpBPsFz5XUJZ+lgAa5c3v6mnS/utQoub6 OcaafR2rRdHlZbRiAuQB43XhIS3WeA== =W0+z -----END PGP SIGNATURE-----