26 Mar 2025 |
Sumner Evans | I think that's the right call. I've been running 1.127.0 for a few days and it's been fine, and the diff to 1.127.1 is not too large. | 21:53:51 |
Sumner Evans | from what I understand, this vulnerability is why matrix.org has been having issues today | 21:54:08 |
emily | what do we do for backports? | 21:54:19 |
| max invited Willi Butz. | 21:54:25 |
ma27 | we backport all synapse updates anyways | 21:54:28 |
| Willi Butz joined the room. | 21:54:28 |
ma27 | so same procedure as every bump imho | 21:54:42 |
emily | the diff looks like DoS at a glance, maybe not channel-kicking levels of severe (though of course that could be misleading) | 21:55:26 |
| @willi:matrix.butz.cloud left the room. | 21:56:08 |
Willi Butz | ty :) | 21:56:19 |
emily | oh, https://github.com/element-hq/synapse/commit/2277df2a1eb685f85040ef98fa21d41aa4cdd389 explicitly says DoS | 21:56:24 |
| Emma [it/its] joined the room. | 21:58:28 |
Sumner Evans | anyone know NickCao's mxid? looks like he went ahead and merged. We should get him into this room if he's on Matrix | 21:58:32 |
Emma [it/its] | 👋 | 21:59:13 |
Sumner Evans | Redacted or Malformed Event | 21:59:27 |
ma27 | there's none in the maintainer entry. will leave a message in the PR. | 21:59:27 |
emily | haven't seen him on Matrix | 21:59:30 |
emily | ironically :) | 21:59:41 |
ma27 | would be kinda funny if the person who regularly merges synapse PRs doesn't use it :D | 21:59:53 |
Sumner Evans | I assume that he must have one because he said that he tested on his homeserver | 21:59:55 |
emily | right, I just mean in the NixOS space | 22:00:04 |
emily | @nickcao:nichi.co is in #dev:nixos.org | 22:00:21 |
emily | so presumably that | 22:00:27 |
Sumner Evans | that matches the website in his GitHub profile, so that is probably it | 22:01:05 |
| ma27 invited Nick Cao. | 22:01:29 |
| Nick Cao joined the room. | 22:02:21 |
ma27 | hi!
given you also do synapse stuff regularly and we were just talking about 1.127.1, we figured it makes sense to also have you here :) | 22:03:58 |
Nick Cao | I actually use matrix for work, so can't afford having a broken synapse! | 22:05:43 |
Emma [it/its] | T&S here, so me neither | 22:06:37 |
Emma [it/its] | thanks sumner and nick for fast tracking this one :) | 22:06:54 |