| 26 Jul 2019 |
 Linda | Jason and Maximus knew about those issues for a year or so, /dev/ponies knew for 4–5 months. | 12:00:52 |
 grin | That's totally helping, even if it isn't necessarily true. | 12:01:58 |
 Maximus | I don't have factual link or event link for that indeed, so please don't just take my word for it | 12:05:05 |
| Maximus | I also won't bother to look for one. It was just an FYI that relies on my credibility given all I've published so far | 12:05:30 |
| Linda | okies | 12:05:40 |
| Linda | I would have an event or a screenshot, but I'm banned from that room | 12:05:52 |
| grin | I'd say it's not on topic here either.... I wrote since I wanted to suggest to package the new version and not to hint anything else or blame anyone. | 12:47:24 |
 Willem | Shouldn't this go through the security team? | 12:52:35 |
 andrewsh | not really | 13:08:41 |
| andrewsh | the version in stable is probably vulnerable but in any case is otherwise unusable since it doesn’t support the current room format | 13:09:19 |
| andrewsh | so it’s a low risk issue | 13:09:27 |
| andrewsh | the version in testing gets updated through unstable | 13:09:38 |
| andrewsh | and that’s not something the security team does really | 13:10:06 |
| andrewsh | as I understand it | 13:10:09 |
 tfheen | so it should be removed from stable? | 13:10:10 |
| andrewsh | it has an important pointer to backports | 13:10:39 |
| andrewsh | that’s why I decided to keep it there | 13:10:56 |
| andrewsh | 😁 | 13:11:07 |
| tfheen | what do you mean? | 13:11:10 |
| tfheen | shipping broken software in stable is bad. | 13:11:22 |
| andrewsh | upon installation, big friendly letters from NEWS say you need backports if you want to federate | 13:11:39 |
| andrewsh | tfheen: technically you can use it without federation | 13:11:55 |
| andrewsh | tfheen: let’s meet in a half an hour and discuss, I’d love to be given good reasons one way or the other | 13:13:10 |
| andrewsh | as I said previously, I don’t have a strong opinion on this, but I had the feeling it’s better to keep it in stable | 13:13:34 |
| andrewsh | but I’m open to opinions | 13:13:39 |
| Willem | I've been using synapse from stable until yesterday without any issues | 13:13:49 |
| tfheen | I'm in a talk and then givnig a talk and then a meeting and then lunch and then giving another talk, so half an hour won't work | 13:14:08 |
| andrewsh | oh really? I thought 98% of the network switched to the new format | 13:14:31 |
| andrewsh | tfheen: well, in ${time_period} 🙂 | 13:14:49 |
| andrewsh | Erik, richvdh: I haven’t looked at the issue itself, is it portable to the 0.99.something we have in stable? | 13:15:54 |
