From 06a1c55e5683dc0525326caefbe18a07a4821be4 Mon Sep 17 00:00:00 2001 From: Eric Eastwood Date: Thu, 22 Oct 2026 14:32:23 -0500 Subject: [PATCH] 1.164.0rc2 --- CHANGES.md | 10 ++++++++++ changelog.d/20387.misc | 1 - changelog.d/20392.misc | 1 - debian/changelog | 6 ++++++ pyproject.toml | 2 +- 5 files changed, 17 insertions(+), 3 deletions(-) delete mode 100644 changelog.d/20387.misc delete mode 100644 changelog.d/20392.misc diff --git a/CHANGES.md b/CHANGES.md index b1ca809782..ed5ed2f569 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,3 +1,13 @@ +# Synapse 1.164.0rc2 (2026-10-22) + +## Internal Changes + +- Update `certifi` to `2026.10.19` to address [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2). This only affects TLS connections made by the Sentry SDK when `sentry` is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store. ([\#20387](https://github.com/element-hq/synapse/issues/20387)) +- Bump `rustls-webpki` to `0.103.16` to actively distrust [compromised eMudhra intermediate CA certificates](https://emudhra.we-have-a-problem.com/). ([\#20392](https://github.com/element-hq/synapse/issues/20392)) + + + + # Synapse 1.164.0rc1 (2026-10-20) ## Features diff --git a/changelog.d/20387.misc b/changelog.d/20387.misc deleted file mode 100644 index 12270904f9..0000000000 --- a/changelog.d/20387.misc +++ /dev/null @@ -1 +0,0 @@ -Update `certifi` to `2026.10.19` to address [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2). This only affects TLS connections made by the Sentry SDK when `sentry` is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store. diff --git a/changelog.d/20392.misc b/changelog.d/20392.misc deleted file mode 100644 index b068bdb0ec..0000000000 --- a/changelog.d/20392.misc +++ /dev/null @@ -1 +0,0 @@ -Bump `rustls-webpki` to `0.103.16` to actively distrust [compromised eMudhra intermediate CA certificates](https://emudhra.we-have-a-problem.com/). diff --git a/debian/changelog b/debian/changelog index 735acf05cf..96d133221d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +matrix-synapse-py3 (1.164.0~rc2) stable; urgency=medium + + * New synapse release 1.164.0rc2. + + -- Synapse Packaging team Thu, 22 Oct 2026 19:32:06 +0000 + matrix-synapse-py3 (1.164.0~rc1) stable; urgency=medium * Stop preinstalling the unused Python lxml package. diff --git a/pyproject.toml b/pyproject.toml index 23c1e22500..cc09b47ad0 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "matrix-synapse" -version = "1.164.0rc1" +version = "1.164.0rc2" description = "Homeserver for the Matrix decentralised comms protocol" readme = "README.rst" authors = [