Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package matrix-synapse for openSUSE:Factory checked in at 2023-10-11 23:56:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/matrix-synapse (Old) and /work/SRC/openSUSE:Factory/.matrix-synapse.new.1807 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "matrix-synapse" Wed Oct 11 23:56:13 2023 rev:87 rq:1116889 version:1.94.0 Changes: -------- --- /work/SRC/openSUSE:Factory/matrix-synapse/matrix-synapse.changes 2023-10-10 21:02:52.695691541 +0200 +++ /work/SRC/openSUSE:Factory/.matrix-synapse.new.1807/matrix-synapse.changes 2023-10-12 11:46:22.582258658 +0200 @@ -4 +4,9 @@ -- Update to 1.94.0 +- Update to 1.94.0 (boo#1216126 CVE-2023-45129) + GHSA-5chr-wjw5-3gq4 / CVE-2023-45129 â Moderate Severity + + A malicious server ACL event can impact performance temporarily + or permanently leading to a persistent denial of service. + + Homeservers running on a closed federation (which presumably do + not need to use server ACLs) are not affected. + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ matrix-synapse.spec: same change