Synapse 1.11.1 (2020-03-03)

===========================

This release includes a security fix impacting installations using Single Sign-On (i.e. SAML2 or CAS) for authentication. Administrators of such installations are encouraged to upgrade as soon as possible.

The release also includes fixes for a couple of other bugs.

Bugfixes
--------

- Add a confirmation step to the SSO login flow before redirecting users to the redirect URL. ([b2bd54a2](https://github.com/matrix-org/synapse/commit/b2bd54a2e31d9a248f73fadb184ae9b4cbdb49f9), [65c73cdf](https://github.com/matrix-org/synapse/commit/65c73cdfec1876a9fec2fd2c3a74923cd146fe0b), [a0178df1](https://github.com/matrix-org/synapse/commit/a0178df10422a76fd403b82d2b2a4ed28a9a9d1e))
- Fixed set a user as an admin with the admin API `PUT /_synapse/admin/v2/users/<user_id>`. Contributed by @dklimpel. ([\#6910](https://github.com/matrix-org/synapse/issues/6910))
- Fix bug introduced in Synapse 1.11.0 which sometimes caused errors when joining rooms over federation, with `'coroutine' object has no attribute 'event_id'`. ([\#6996](https://github.com/matrix-org/synapse/issues/6996))
-----BEGIN PGP SIGNATURE-----
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=2uHe
-----END PGP SIGNATURE-----