ALT-PU-2026-18273: package matrix-synapse update to version 1.162.0-alt1
Описание
This update upgrades matrix-synapse to version 1.162.0-alt1.
Устраненные уязвимости2
Ссылки28
GHSA-27p5-4f45-gx76
https://github.com/advisories/GHSA-27p5-4f45-gx76GHSA-36hh-v3qg-5jq4
https://github.com/advisories/GHSA-36hh-v3qg-5jq4GHSA-6qf2-7x63-mm6v
https://github.com/advisories/GHSA-6qf2-7x63-mm6vGHSA-6wjm-9p2x-gvpm
https://github.com/advisories/GHSA-6wjm-9p2x-gvpmGHSA-82j2-j2ch-gfr8
https://github.com/advisories/GHSA-82j2-j2ch-gfr8GHSA-8q93-326v-3m7g
https://github.com/advisories/GHSA-8q93-326v-3m7gGHSA-95fh-hv8c-chvq
https://github.com/advisories/GHSA-95fh-hv8c-chvqGHSA-chgr-c6px-7xpp
https://github.com/advisories/GHSA-chgr-c6px-7xppGHSA-cjh7-rcpx-xpf8
https://github.com/advisories/GHSA-cjh7-rcpx-xpf8GHSA-fp53-rw9v-hcf9
https://github.com/advisories/GHSA-fp53-rw9v-hcf9GHSA-hgcg-p9gx-fq5f
https://github.com/advisories/GHSA-hgcg-p9gx-fq5fGHSA-jhcg-5392-5mjw
https://github.com/advisories/GHSA-jhcg-5392-5mjwGHSA-qcjr-46gf-7f4r
https://github.com/advisories/GHSA-qcjr-46gf-7f4rGHSA-r66v-qhwx-8rg4
https://github.com/advisories/GHSA-r66v-qhwx-8rg4GHSA-rgv2-84w7-5j9p
https://github.com/advisories/GHSA-rgv2-84w7-5j9pGHSA-vh4c-pqh4-w3wq
https://github.com/advisories/GHSA-vh4c-pqh4-w3wqСвязанные уязвимости
Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users to be denied service. This vulnerability is fixed in 1.152.1.
Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users to be denied service. This vulnerability is fixed in 1.152.1.
Synapse is an open source Matrix homeserver implementation. Prior to 1 ...
Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This vulnerability is fixed in 1.152.1.
Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This vulnerability is fixed in 1.152.1.