Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

v1.92.3
Compare
Choose a tag to compare
@MatMaul MatMaul released this 18 Sep 14:51
· 377 commits to develop since this release
v1.92.3
e36990c

Synapse 1.92.3 (2023-09-18)

This is again a security update targeted at mitigating CVE-2023-4863.
It turns out that libwebp is bundled statically in Pillow wheels so we need to update this dependency instead of
libwebp package at the OS level.

Unlike what was advertised in 1.92.2 changelog this release also impacts PyPI wheels and Debian packages from matrix.org.

We encourage admins to upgrade as soon as possible.

Internal Changes

  • Pillow 10.0.1 is now mandatory because of libwebp CVE-2023-4863, since Pillow provides libwebp in the wheels. (#16347)

Updates to locked dependencies

  • Bump pillow from 10.0.0 to 10.0.1. (#16344)
Assets 15
Loading