-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 31 Aug 2021 16:22:39 +0100
Source: matrix-synapse
Architecture: source
Version: 1.41.1-1
Distribution: unstable
Urgency: high
Maintainer: Matrix Packaging Team <pkg-matrix-maintainers@lists.alioth.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
matrix-synapse (1.41.1-1) unstable; urgency=high
.
* New upstream release.
* SECURITY UPDATE:
- Unauthorised users could enumerate a private room's list of
members and their display names (CVE-2021-39164, GHSA-3x4c-pq33-4w3q).
- Unauthorised users could disclose a private room's name, avatar,
topic, and number of members (CVE-2021-39163, GHSA-jj53-8fmw-f2w2).
Checksums-Sha1:
824e71be9d91f3b8425519c65dd8d94a5d77275f 2438 matrix-synapse_1.41.1-1.dsc
f9a2387a209824077cb45f3fe14775bb3d356be5 7436053 matrix-synapse_1.41.1.orig.tar.gz
f0136e661fbeead7b4ad49f8c08a5a028f5cc524 108516 matrix-synapse_1.41.1-1.debian.tar.xz
Checksums-Sha256:
8faaa2114bca5cf5126e1dadc5eb05dcee520e49577f2e0862006281de5c58db 2438 matrix-synapse_1.41.1-1.dsc
ebebc810c01f6bcfc970a5327f3149965da60621ab91730dd97f849d3d339efe 7436053 matrix-synapse_1.41.1.orig.tar.gz
0e6c70b0754c026e15e4bf11eeeb5bcd879e2c10eb17aa6d77ddb4b9c01a5723 108516 matrix-synapse_1.41.1-1.debian.tar.xz
Files:
514084516ddf7a9a6465d7ab9c1e49be 2438 net optional matrix-synapse_1.41.1-1.dsc
2a5db614ed09d5fd28a1fb925ee4e614 7436053 net optional matrix-synapse_1.41.1.orig.tar.gz
6a9f8abe9910fc6c478c32ade9202ba7 108516 net optional matrix-synapse_1.41.1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCYS5J9QAKCRDoRGtKyMdy
YdKDAQCHvnE5AJMso02u4Iazsqim4Awh0V/mIF7R33+EBgv+FgEAn41tbsjZy7j6
LtdJrIbT/N4nBfBcYILZpyEYwrDSQg8=
=nnHe
-----END PGP SIGNATURE-----
