matrix-synapse: 1.23.0 -> 1.24.0

ChangeLog: https://github.com/matrix-org/synapse/releases/tag/v1.24.0

This release contains two security advisories:

* CVE-2020-26257[1]: possible DDoS in the federation API.
* CVE-2020-1971[2]: to be fixed in #106362[3].

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26257
[2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971
[3] https://github.com/NixOS/nixpkgs/pull/106362
This commit is contained in:
Maximilian Bosch 2020-12-09 12:27:43 +01:00
parent 0d5608d9b5
commit 917cac4663
No known key found for this signature in database
GPG key ID: 091DBF4D1FC46B8E

View file

@ -10,11 +10,11 @@ let
in
buildPythonApplication rec {
pname = "matrix-synapse";
version = "1.23.0";
version = "1.24.0";
src = fetchPypi {
inherit pname version;
sha256 = "18an6nvxq2g21rq5ph3xlnkl75dmilcrz4ykdydz37hs09z6q1al";
sha256 = "sha256-yxcdFd7iVXbDIUx1lW73FKLy+BZfSspz60LKw7BCtl4=";
};
patches = [