CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]  2020/12/09 09:04:40

Modified files:
        net/synapse    : Makefile distinfo 
        net/synapse/pkg: PLIST 

Log message:
net/synapse: update to 1.24.0, from maintainer Renaud Allard

There is a denial of service attack (CVE-2020-26257) against the
federation APIs in which future events will not be correctly sent to
other servers over federation. This affects all servers that participate
in open federation. (Fixed in #8776).

Synapse may be affected by OpenSSL CVE-2020-1971.  Synapse
administrators should ensure that they have the latest versions of the
cryptography Python package installed.

ok abieber@

Reply via email to