CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2020/12/09 09:04:40
Modified files:
net/synapse : Makefile distinfo
net/synapse/pkg: PLIST
Log message:
net/synapse: update to 1.24.0, from maintainer Renaud Allard
There is a denial of service attack (CVE-2020-26257) against the
federation APIs in which future events will not be correctly sent to
other servers over federation. This affects all servers that participate
in open federation. (Fixed in #8776).
Synapse may be affected by OpenSSL CVE-2020-1971. Synapse
administrators should ensure that they have the latest versions of the
cryptography Python package installed.
ok abieber@