From 167b7ea3bc4b1ce06b1b92acd1eec3df1f1180ee Mon Sep 17 00:00:00 2001 From: Eric Eastwood Date: Wed, 28 Oct 2026 13:06:18 -0500 Subject: [PATCH] 1.164.1 --- CHANGES.md | 16 ++++++++++++++++ changelog.d/20421.misc | 1 - changelog.d/20422.bugfix | 4 ---- debian/changelog | 6 ++++++ pyproject.toml | 2 +- 5 files changed, 23 insertions(+), 6 deletions(-) delete mode 100644 changelog.d/20421.misc delete mode 100644 changelog.d/20422.bugfix diff --git a/CHANGES.md b/CHANGES.md index 80df04de4c..0a03b7e2dc 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,3 +1,19 @@ +# Synapse 1.164.1 (2026-10-28) + +## Bugfixes + +- Fix clearing user status for clients that send a `null` profile field value. + + When `include_profile_updates_in_sync` is enabled, Synapse will continue to accept `null` custom profile field values + until clients have had a sufficient time to change their behaviour. This special casing is tracked in [this issue](https://github.com/element-hq/synapse/issues/20424). ([\#20422](https://github.com/element-hq/synapse/issues/20422)) + +## Internal Changes + +- Bump `msgpack` from `1.2.1` to `1.2.4` to address [`GHSA-j586-36cw-2gc2`](https://github.com/msgpack/msgpack-python/security/advisories/GHSA-j586-36cw-2gc2) which can cause memory exhaustion problems when malformed tokens are used with the public room list API's. ([\#20421](https://github.com/element-hq/synapse/issues/20421)) + + + + # Synapse 1.164.0 (2026-10-27) No significant changes since 1.164.0rc3. diff --git a/changelog.d/20421.misc b/changelog.d/20421.misc deleted file mode 100644 index 9ba7dec1e1..0000000000 --- a/changelog.d/20421.misc +++ /dev/null @@ -1 +0,0 @@ -Bump `msgpack` from `1.2.1` to `1.2.4` to address [`GHSA-j586-36cw-2gc2`](https://github.com/msgpack/msgpack-python/security/advisories/GHSA-j586-36cw-2gc2) which can cause memory exhaustion problems when malformed tokens are used with the public room list API's. diff --git a/changelog.d/20422.bugfix b/changelog.d/20422.bugfix deleted file mode 100644 index 4a6e587c97..0000000000 --- a/changelog.d/20422.bugfix +++ /dev/null @@ -1,4 +0,0 @@ -Fix clearing user status for clients that send a `null` profile field value. - -When `include_profile_updates_in_sync` is enabled, Synapse will continue to accept `null` custom profile field values -until clients have had a sufficient time to change their behaviour. This special casing is tracked in [this issue](https://github.com/element-hq/synapse/issues/20424). \ No newline at end of file diff --git a/debian/changelog b/debian/changelog index 092c06adba..115a79cfc9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +matrix-synapse-py3 (1.164.1) stable; urgency=medium + + * New synapse release 1.164.1. + + -- Synapse Packaging team Wed, 28 Oct 2026 18:05:53 +0000 + matrix-synapse-py3 (1.164.0) stable; urgency=medium * New synapse release 1.164.0. diff --git a/pyproject.toml b/pyproject.toml index 80467567b8..172b1c3aec 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "matrix-synapse" -version = "1.164.0" +version = "1.164.1" description = "Homeserver for the Matrix decentralised comms protocol" readme = "README.rst" authors = [