-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 14 Sep 2021 21:44:24 +0100
Source: matrix-synapse
Architecture: source
Version: 1.41.1-1~bpo10+1
Distribution: buster-backports-sloppy
Urgency: high
Maintainer: Matrix Packaging Team <pkg-matrix-maintainers@lists.alioth.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
matrix-synapse (1.41.1-1~bpo10+1) buster-backports-sloppy; urgency=medium
.
* Rebuild for buster-backports-sloppy.
.
matrix-synapse (1.41.1-1) unstable; urgency=high
.
* New upstream release.
* SECURITY UPDATE:
- Unauthorised users could enumerate a private room's list of
members and their display names (CVE-2021-39164, GHSA-3x4c-pq33-4w3q).
- Unauthorised users could disclose a private room's name, avatar,
topic, and number of members (CVE-2021-39163, GHSA-jj53-8fmw-f2w2).
Checksums-Sha1:
8f8c9434f3bcb1fa45413ba6fa4f7b1c0810f065 2478 matrix-synapse_1.41.1-1~bpo10+1.dsc
356eee0aa822c2c7fb0d25e5ea5768d987ceaa63 108720 matrix-synapse_1.41.1-1~bpo10+1.debian.tar.xz
Checksums-Sha256:
685a8b14c28a414c8f03f4d87bdcff51b1bc91288d820f674f13f4298ce4f4b7 2478 matrix-synapse_1.41.1-1~bpo10+1.dsc
8c09eac7cede0e3bad6de22117b6ebf8ae5cdd8c1f28f802229ba361092ab4d9 108720 matrix-synapse_1.41.1-1~bpo10+1.debian.tar.xz
Files:
2f1daedb7629f1b899443284d3494517 2478 net optional matrix-synapse_1.41.1-1~bpo10+1.dsc
9e1a7515be44f9dfd126ed07881c8d2b 108720 net optional matrix-synapse_1.41.1-1~bpo10+1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCYUEJzQAKCRDoRGtKyMdy
YdYCAP4+17BunKExaxrWrt3ihwNHmUQiJtdN3jCNtuZlVNgj2QEA7UMrmNFgUS72
SKpOTtZQYKro5ZaKU2yYefeWPp8z6g8=
=qQFI
-----END PGP SIGNATURE-----
