Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

v1.95.1

Compare
Choose a tag to compare
@erikjohnston erikjohnston released this 31 Oct 15:14
· 199 commits to develop since this release
v1.95.1

Synapse 1.95.1 (2023-10-31)

Security advisory

The following issue is fixed in 1.95.1.

  • GHSA-mp92-3jfm-3575 / CVE-2023-43796 — Moderate Severity

    Cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver.

See the advisory for more details. If you have any questions, email security@matrix.org.