Accepted matrix-synapse 1.61.0-1~bpo11+3 (source) into bullseye-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 28 Jun 2022 19:03:13 +0200
Source: matrix-synapse
Architecture: source
Version: 1.61.0-1~bpo11+3
Distribution: bullseye-backports
Urgency: medium
Maintainer: Matrix Packaging Team <pkg-matrix-maintainers@lists.alioth.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
matrix-synapse (1.61.0-1~bpo11+3) bullseye-backports; urgency=medium
.
* SECURITY ISSUE: GHSA-22p3-qrh9-cx32 / CVE-2022-31052.
Synapse instances with the url_preview_enabled homeserver config option
set to true are affected. URL previews of some web pages can lead to
unbounded recursion, causing the request to either fail, or in some
cases crash the running Synapse process.
Checksums-Sha1:
39017e51d01e357cae42642715fafe63b3fd78a3 2632 matrix-synapse_1.61.0-1~bpo11+3.dsc
a0f145a0405708a776768c8633d700352721ae2c 112160 matrix-synapse_1.61.0-1~bpo11+3.debian.tar.xz
Checksums-Sha256:
bb2d40611c3867486cd4c321c8fd554bbade4d42bba4994f233c7de228a4d765 2632 matrix-synapse_1.61.0-1~bpo11+3.dsc
b6c84095fefebea5d3be8d9766af0cbde7697cee05ef99bd58cae3fb31f9d8ed 112160 matrix-synapse_1.61.0-1~bpo11+3.debian.tar.xz
Files:
8655bc3fecbd8d726718877d5010bf1b 2632 net optional matrix-synapse_1.61.0-1~bpo11+3.dsc
18f581f58d4eacd1f8cdc355d2c20059 112160 net optional matrix-synapse_1.61.0-1~bpo11+3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCYrs0tAAKCRDoRGtKyMdy
YQ1KAQCQ/3NvZBAl1KScpcYar+YcvcJSTNmdkfL0U4A3VPjXLgEAtB9utSU1nHJp
PUpDJnUYpuDXNHrkTxDUoZy8dTUKJAA=
=vzYc
-----END PGP SIGNATURE-----
Reply to: