1.163.1

CHANGES.md

@@ -1,3 +1,13 @@
+# Synapse 1.163.1 (2026-10-22)
+
+## Internal Changes
+
+- Update `certifi` to `2026.10.19` to address [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2). This only affects TLS connections made by the Sentry SDK when `sentry` is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store. ([\#20387](https://github.com/element-hq/synapse/issues/20387))
+- Bump `rustls-webpki` to `0.103.16` to actively distrust [compromised eMudhra intermediate CA certificates](https://emudhra.we-have-a-problem.com/). ([\#20392](https://github.com/element-hq/synapse/issues/20392))
+
+
+
+
 # Synapse 1.163.0 (2026-10-14)
 
 ## Bugfixes

changelog.d/20387.misc

@@ -1 +0,0 @@
-Update `certifi` to `2026.10.19` to address [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2). This only affects TLS connections made by the Sentry SDK when `sentry` is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store.

changelog.d/20392.misc

@@ -1 +0,0 @@
-Bump `rustls-webpki` to `0.103.16` to actively distrust [compromised eMudhra intermediate CA certificates](https://emudhra.we-have-a-problem.com/).

debian/changelog

@@ -1,3 +1,9 @@
+matrix-synapse-py3 (1.163.1) stable; urgency=medium
+
+  * New synapse release 1.163.1.
+
+ -- Synapse Packaging team <packages@matrix.org>  Thu, 22 Oct 2026 19:01:11 +0000
+
 matrix-synapse-py3 (1.163.0) stable; urgency=medium
 
   * New synapse release 1.163.0.

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "matrix-synapse"
-version = "1.163.0"
+version = "1.163.1"
 description = "Homeserver for the Matrix decentralised comms protocol"
 readme = "README.rst"
 authors = [