diff --git a/CHANGES.md b/CHANGES.md index d122a74e19..336ed7addf 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,3 +1,33 @@ +# Synapse 1.157.2 (2026-07-28) + +This security release addresses several vulnerabilities. + +Please upgrade when you can, particularly if your homeserver participates in open federation +and/or has untrusted local users. + +## Security Fixes + +High severity: + +- Fix [ELEMENTSEC-2026-1071](https://github.com/element-hq/synapse/security/advisories/GHSA-fp53-rw9v-hcf9) +- Fix [ELEMENTSEC-2024-1520](https://github.com/element-hq/synapse/security/advisories/GHSA-rgv2-84w7-5j9p) +- Fix [ELEMENTSEC-2026-1717](https://github.com/element-hq/synapse/security/advisories/GHSA-27p5-4f45-gx76) +- Fix [ELEMENTSEC-2026-1721](https://github.com/element-hq/synapse/security/advisories/GHSA-95fh-hv8c-chvq) +- Fix [ELEMENTSEC-2026-1729](https://github.com/element-hq/synapse/security/advisories/GHSA-cjh7-rcpx-xpf8) +- Fix [ELEMENTSEC-2026-1740](https://github.com/element-hq/synapse/security/advisories/GHSA-6wjm-9p2x-gvpm) + +Moderate severity: + +- Fix [ELEMENTSEC-2026-1714](https://github.com/element-hq/synapse/security/advisories/GHSA-qcjr-46gf-7f4r) +- Fix [ELEMENTSEC-2026-1718](https://github.com/element-hq/synapse/security/advisories/GHSA-r66v-qhwx-8rg4) +- Fix [ELEMENTSEC-2026-1751](https://github.com/element-hq/synapse/security/advisories/GHSA-jhcg-5392-5mjw) + +Low severity: + +- Fix [ELEMENTSEC-2026-1703](https://github.com/element-hq/synapse/security/advisories/GHSA-vh4c-pqh4-w3wq) +- Fix [ELEMENTSEC-2026-1760](https://github.com/element-hq/synapse/security/advisories/GHSA-hgcg-p9gx-fq5f) + + # Synapse 1.157.1 (2026-07-22) ## Bugfixes diff --git a/debian/changelog b/debian/changelog index 6a8d4663a4..38a6625e8b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +matrix-synapse-py3 (1.157.2) stable; urgency=medium + + * New Synapse release 1.157.2. + + -- Synapse Packaging team Tue, 28 Jul 2026 14:01:25 +0100 + matrix-synapse-py3 (1.157.1) stable; urgency=medium * New synapse release 1.157.1. diff --git a/pyproject.toml b/pyproject.toml index 64e2838085..4dd059a45c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "matrix-synapse" -version = "1.157.1" +version = "1.157.2" description = "Homeserver for the Matrix decentralised comms protocol" readme = "README.rst" authors = [