Search results

GnuPG-signed releases

A-PackagingOur Debian packages, docker images; or issues relevant to downstream packagersOur Debian packages, docker images; or issues relevant to downstream packagers

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

Security

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

Status: Open.

#2036 In matrix-org/synapse;

· sim6 opened on Mar 20, 2017

Files in /var/lib/matrix-synapse/ are world-readable

A-PackagingOur Debian packages, docker images; or issues relevant to downstream packagersOur Debian packages, docker images; or issues relevant to downstream packagers

P5(OBSOLETE: use S- labels.) Dubious backlog: will not schedule, but may consider patches(OBSOLETE: use S- labels.) Dubious backlog: will not schedule, but may consider patches

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#2955 In matrix-org/synapse;

· ghost opened on Mar 6, 2018

When users change their identity mappings or other credentials we should warn all their known contact details.

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

Security

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

Status: Open.

#2093 In matrix-org/synapse;

· ara4n opened on Apr 1, 2017

Media repo should strip out obvious file paths in filename

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#2887 In matrix-org/synapse;

· turt2live opened on Feb 18, 2018

Don't serve user-uploaded files with correct mime/content type

A-Media-RepositoryUploading, downloading images and video, thumbnailingUploading, downloading images and video, thumbnailing

Security

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

Status: Open.

#2877 In matrix-org/synapse;

· rugk opened on Feb 15, 2018

Shutdown room API should somehow indicate to other homeservers that a content violation has occurred

Security

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

Status: Open.

#2692 In matrix-org/synapse;

· turt2live opened on Nov 16, 2017

repeatedly calling /_matrix/client/r0/keys/upload DoSes federation

A-Device-List-TrackingTelling clients about other devices. Often related to E2EE.Telling clients about other devices. Often related to E2EE.

P4(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#3657 In matrix-org/synapse;

· richvdh opened on Aug 6, 2018

[Feature] Add client-server endpoint to logout from all current WEB sessions

A-Login

P4(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

Security

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

z-feature(Deprecated Label)(Deprecated Label)

z-p3(Deprecated Label)(Deprecated Label)

Status: Open.

#5400 In matrix-org/synapse;

· menturion opened on Jun 8, 2019

It is possible to set a stupidly long displayname

A-Membership

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

P4(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#5079 In matrix-org/synapse;

· richvdh opened on Apr 18, 2019

Manhole's server username / password / SSH keys should not be hard-coded

O-UncommonMost users are unlikely to come across this or unexpected workflowMost users are unlikely to come across this or unexpected workflow

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#3850 In matrix-org/synapse;

· hawkowl opened on Sep 12, 2018

Access tokens are not invalidated when credentials are invalidated via an external auth provider

Security

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

z-p2(Deprecated Label)(Deprecated Label)

Status: Open.

#4158 In matrix-org/synapse;

· richvdh opened on Nov 7, 2018

Synapse sends stack trace as error message over federation

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#6582 In matrix-org/synapse;

· Bubu opened on Dec 20, 2019