diff --git a/CHANGELOG b/CHANGELOG index 69fdaad..beaff61 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -142,3 +142,9 @@ * Add support for generating thumbnails for WebP images. Previously, users would see an empty box instead of preview image. Contributed by @WGH-. (#7586) * Support the standardized m.login.sso user-interactive authentication flow. (#7630) +[1.5.0] +* Update Synapse to 1.15.2 +* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.15.2) +* A malicious homeserver could force Synapse to reset the state in a room to a small subset of the correct state. This affects all Synapse deployments which federate with untrusted servers. (96e9afe6) +* HTML pages served via Synapse were vulnerable to clickjacking attacks. This predominantly affects homeservers with single-sign-on enabled, but all server administrators are encouraged to upgrade. (ea26e9a9) + diff --git a/CloudronManifest.json b/CloudronManifest.json index f3b94d2..2f569ee 100644 --- a/CloudronManifest.json +++ b/CloudronManifest.json @@ -5,7 +5,7 @@ "description": "file://DESCRIPTION.md", "changelog": "file://CHANGELOG", "tagline": "Secure & decentralized communication", - "version": "1.4.0", + "version": "1.5.0", "healthCheckPath": "/", "httpPort": 8008, "memoryLimit": 536870912, diff --git a/DESCRIPTION.md b/DESCRIPTION.md index 3138db8..d045828 100644 --- a/DESCRIPTION.md +++ b/DESCRIPTION.md @@ -1,4 +1,4 @@ -This app packages Synapse 1.15.1. +This app packages Synapse 1.15.2. **This package only provides the Matrix backend. A variety of clients are available [here](https://matrix.org/clients/). Riot is a popular web frontend for Matrix and