You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Apr 26, 2024. It is now read-only.
Copy file name to clipboardExpand all lines: CHANGES.md
+25Lines changed: 25 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,3 +1,28 @@
1
+
Synapse 1.33.2 (2021-05-11)
2
+
===========================
3
+
4
+
Due to the security issue highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild.
5
+
6
+
Security advisory
7
+
-----------------
8
+
9
+
This release fixes a denial of service attack ([CVE-2021-29471](https://github.com/matrix-org/synapse/security/advisories/GHSA-x345-32rc-8h85)) against Synapse's push rules implementation. Server admins are encouraged to upgrade.
- Fix bug where `/sync` would break if using the latest version of `attrs` dependency, by pinning to a previous version. ([\#9937](https://github.com/matrix-org/synapse/issues/9937))
The ``room_invite_state_types`` configuration setting has been deprecated and
95
+
replaced with ``room_prejoin_state``. See the `sample configuration file <https://github.com/matrix-org/synapse/blob/v1.34.0/docs/sample_config.yaml#L1515>`_.
96
+
97
+
If you have set ``room_invite_state_types`` to the default value you should simply
98
+
remove it from your configuration file. The default value used to be:
99
+
100
+
.. code:: yaml
101
+
102
+
room_invite_state_types:
103
+
- "m.room.join_rules"
104
+
- "m.room.canonical_alias"
105
+
- "m.room.avatar"
106
+
- "m.room.encryption"
107
+
- "m.room.name"
108
+
109
+
If you have customised this value by adding addition state types, you should
110
+
remove ``room_invite_state_types`` and configure ``additional_event_types`` with
111
+
your customisations.
112
+
113
+
If you have customised this value by removing state types, you should rename
114
+
``room_invite_state_types`` to ``additional_event_types``, and set
0 commit comments