From 917cac46631803099c9ff414ac77964eee615365 Mon Sep 17 00:00:00 2001 From: Maximilian Bosch Date: Wed, 9 Dec 2020 12:27:43 +0100 Subject: [PATCH] matrix-synapse: 1.23.0 -> 1.24.0 ChangeLog: https://github.com/matrix-org/synapse/releases/tag/v1.24.0 This release contains two security advisories: * CVE-2020-26257[1]: possible DDoS in the federation API. * CVE-2020-1971[2]: to be fixed in #106362[3]. [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26257 [2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971 [3] https://github.com/NixOS/nixpkgs/pull/106362 --- pkgs/servers/matrix-synapse/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/matrix-synapse/default.nix b/pkgs/servers/matrix-synapse/default.nix index e6266268a93..39e1952e1e8 100644 --- a/pkgs/servers/matrix-synapse/default.nix +++ b/pkgs/servers/matrix-synapse/default.nix @@ -10,11 +10,11 @@ let in buildPythonApplication rec { pname = "matrix-synapse"; - version = "1.23.0"; + version = "1.24.0"; src = fetchPypi { inherit pname version; - sha256 = "18an6nvxq2g21rq5ph3xlnkl75dmilcrz4ykdydz37hs09z6q1al"; + sha256 = "sha256-yxcdFd7iVXbDIUx1lW73FKLy+BZfSspz60LKw7BCtl4="; }; patches = [