summary refs log tree commit diff
diff options
context:
space:
mode:
authorErik Johnston <erik@matrix.org>2023-10-31 14:02:32 +0000
committerErik Johnston <erik@matrix.org>2023-10-31 14:02:32 +0000
commita11511954a58975d2e5400257a0cecfd27413447 (patch)
tree9bb31f092877b92bec86409b2c4fbb420dbcdd8a
parentMerge pull request from GHSA-mp92-3jfm-3575 (diff)
downloadsynapse-a11511954a58975d2e5400257a0cecfd27413447.tar.xz
1.95.1 v1.95.1
Diffstat (limited to '')
-rw-r--r--CHANGES.md14
-rw-r--r--debian/changelog6
-rw-r--r--pyproject.toml2
3 files changed, 21 insertions, 1 deletions
diff --git a/CHANGES.md b/CHANGES.md
index caecc737f3..5aecdfb23d 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,3 +1,17 @@
+# Synapse 1.95.1 (2023-10-31)
+
+## Security advisory
+
+The following issue is fixed in 1.95.1.
+
+- [GHSA-mp92-3jfm-3575](https://github.com/matrix-org/synapse/security/advisories/GHSA-mp92-3jfm-3575) / [CVE-2023-43796](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43796) — Moderate Severity
+
+  Cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver.
+
+See the advisory for more details. If you have any questions, email security@matrix.org.
+
+
+
 # Synapse 1.95.0 (2023-10-24)
 
 ### Internal Changes
diff --git a/debian/changelog b/debian/changelog
index 9bd5490ede..2f9a7d3724 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+matrix-synapse-py3 (1.95.1) stable; urgency=medium
+
+  * New Synapse release 1.95.1.
+
+ -- Synapse Packaging team <packages@matrix.org>  Tue, 31 Oct 2023 14:00:00 +0000
+
 matrix-synapse-py3 (1.95.0) stable; urgency=medium
 
   * New Synapse release 1.95.0.
diff --git a/pyproject.toml b/pyproject.toml
index f3764b1a57..b9cabe57e5 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -96,7 +96,7 @@ module-name = "synapse.synapse_rust"
 
 [tool.poetry]
 name = "matrix-synapse"
-version = "1.95.0"
+version = "1.95.1"
 description = "Homeserver for the Matrix decentralised comms protocol"
 authors = ["Matrix.org Team and Contributors <packages@matrix.org>"]
 license = "Apache-2.0"