Skip to main content

If you run your own #synapse #matrix server you probably want to update to v1.105.1 now: https://github.com/element-hq/synapse/security/advisories/GHSA-3h7q-rfh9-xm4v

Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage

### Impact A remote Matrix user with malicious intent, sharing a room with Synapse instances before 1.105.1, can dispatch specially crafted events to exploit a weakness in how the auth chain cov...
GitHub
#matrix #synapse

reshared this

in reply to Bubu :progress_pride:

Karel P Kerezman
Karel P Kerezman
• •
Thank you! I was due to run updates anyway, this is just added impetus.
in reply to Bubu :progress_pride:

bjo
bjo
• •
I thought that joining rooms is already considered as ddosing synapse.
⇧