| 16 Sep 2020 |
 grin | Synapse 1.19.2 is a security release. All federating instances should upgrade immediately. If you are running a 1.20.0 release candidate then upgrade to 1.20.0rc4 | 14:01:52 |
| grin | *
Synapse 1.19.2 is a security release. All federating instances should upgrade immediately. If you are running a 1.20.0 release candidate then upgrade to 1.20.0rc4
| 14:02:01 |
 Fred Posner | package doesn't seem available yet | 14:02:24 |
| grin | absolutely not since this announcement wa 1 hour ago, and the packaging usually takes days, or as andrewsh 's time permits ;-) This was rather a reminder to package the new version if possible. | 14:03:42 |
| grin | * absolutely not since this announcement was 1 hour ago, and the packaging usually takes days, or as andrewsh 's time permits ;-) This was rather a reminder to package the new version if possible. | 14:04:09 |
| grin | (as a sidenote it isn't a security issue but rather a bug where new development servers not following the specs may start breaking rooms.) | 14:04:44 |
| grin | (in fact one specific server.) | 14:04:57 |
| Fred Posner | and now it's out | 14:05:06 |
| Fred Posner | =) | 14:05:07 |
| grin | well it's a 2-3 line patch so I have patched my instance | 14:06:03 |
| grin | it's here: | 14:06:25 |
| grin | https://github.com/matrix-org/synapse/pull/8324/files | 14:06:52 |
 uhoreg | In reply to @grin:grin.hu
(as a sidenote it isn't a security issue but rather a bug where new development servers not following the specs may start breaking rooms.) If any server can break a room then it's a security issue. | 14:06:58 |
| grin | uhoreg: I accept your semantic correction, what I meant it is a problem for the network, not the server or admin. | 14:07:42 |
| grin | So nobody will break into your server | 14:07:57 |
| grin | And eat your lunch. Eek! | 14:08:08 |
| grin | I just noted since debian package may take a few days. | 14:08:27 |
| grin | But considering the wild available versions (0.34.0 - 0.99.5.1 - 1.1.0 - 1.12.3 - 1.15.2 - 1.18.0 - 1.19.0rc1) the problems will arise anyway. | 14:10:46 |
| grin | I believe 0.34.0 is the undisputed winner here. | 14:11:34 |
 andrewsh | In reply to @fred:matrix.lod.com
Do we know if the package for 1.19.2 will be released today? It may if time permits 🙂 (I'm currently on holiday) | 14:40:51 |
| andrewsh | actually, I just found about ten minutes needed for this | 14:51:17 |
| andrewsh | but don’t expect me to be that quick until Monday 😀 | 14:51:38 |
| andrewsh | also uploaded the patch to backports (version number is still 1.19.1 though) | 14:52:31 |
| andrewsh | * also uploaded the patch to backports (the version number is still 1.19.1 though) | 14:52:37 |
| grin | "Synapse Holiday Special Release" | 14:52:40 |
| andrewsh | "Synapse Holiday in South Crete Special Release" | 14:53:05 |
| andrewsh | "Synapse Swimming-in-the-sea-and-uploading Special Release" | 14:53:22 |
| grin | crete? whoa. | 14:53:23 |
| grin | I strongly hope you will really enjoy that place. Pretty nice. | 14:53:52 |
| andrewsh | we are really enjoying it 😀 unfortunately, we’re leaving the South (Plakiás) in about ten minutes, it was really great here | 14:55:06 |
