-
v1.139.1 Stable
released this
2025-10-07 11:53:41 +00:00 | 313 commits to develop since this releaseSynapse 1.139.1 (2025-10-07)
Security Fixes
- Fix CVE-2025-61672 / GHSA-fh66-fcv5-jjfr. Lack of validation for device keys in Synapse before 1.139.1 allows an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. (#17097)
Deprecations and Removals
Downloads