From 56913c3d7187704538b7c7d34ee56bd14d6db2bf Mon Sep 17 00:00:00 2001 From: Eric Eastwood Date: Thu, 22 Oct 2026 14:01:36 -0500 Subject: [PATCH] 1.163.1 --- CHANGES.md | 10 ++++++++++ changelog.d/20387.misc | 1 - changelog.d/20392.misc | 1 - debian/changelog | 6 ++++++ pyproject.toml | 2 +- 5 files changed, 17 insertions(+), 3 deletions(-) delete mode 100644 changelog.d/20387.misc delete mode 100644 changelog.d/20392.misc diff --git a/CHANGES.md b/CHANGES.md index f4f498ea93..d9c19dfab0 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,3 +1,13 @@ +# Synapse 1.163.1 (2026-10-22) + +## Internal Changes + +- Update `certifi` to `2026.10.19` to address [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2). This only affects TLS connections made by the Sentry SDK when `sentry` is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store. ([\#20387](https://github.com/element-hq/synapse/issues/20387)) +- Bump `rustls-webpki` to `0.103.16` to actively distrust [compromised eMudhra intermediate CA certificates](https://emudhra.we-have-a-problem.com/). ([\#20392](https://github.com/element-hq/synapse/issues/20392)) + + + + # Synapse 1.163.0 (2026-10-14) ## Bugfixes diff --git a/changelog.d/20387.misc b/changelog.d/20387.misc deleted file mode 100644 index 12270904f9..0000000000 --- a/changelog.d/20387.misc +++ /dev/null @@ -1 +0,0 @@ -Update `certifi` to `2026.10.19` to address [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2). This only affects TLS connections made by the Sentry SDK when `sentry` is configured, SAML, and a couple utility scripts; federation and Synapse's other outbound HTTP requests use the system trust store. diff --git a/changelog.d/20392.misc b/changelog.d/20392.misc deleted file mode 100644 index b068bdb0ec..0000000000 --- a/changelog.d/20392.misc +++ /dev/null @@ -1 +0,0 @@ -Bump `rustls-webpki` to `0.103.16` to actively distrust [compromised eMudhra intermediate CA certificates](https://emudhra.we-have-a-problem.com/). diff --git a/debian/changelog b/debian/changelog index 0552032bce..728206359d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +matrix-synapse-py3 (1.163.1) stable; urgency=medium + + * New synapse release 1.163.1. + + -- Synapse Packaging team Thu, 22 Oct 2026 19:01:11 +0000 + matrix-synapse-py3 (1.163.0) stable; urgency=medium * New synapse release 1.163.0. diff --git a/pyproject.toml b/pyproject.toml index bbb27a8507..308a550eed 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "matrix-synapse" -version = "1.163.0" +version = "1.163.1" description = "Homeserver for the Matrix decentralised comms protocol" readme = "README.rst" authors = [