2.5.6

matrix-org · Jul 31, 2023 · 77cb99e · 77cb99e
1 parent 1cd7483
commit 77cb99e
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,12 @@
+Sydent 2.5.6 (2023-07-31)
+=========================
+
+Bugfixes
+--------
+
+- Fix a long-standing issue where Sydent would not verify the configured SMTP server's certificates. See [GHSA-p6hw-wm59-3q5q](https://github.com/matrix-org/sydent/security/advisories/GHSA-p6hw-wm59-3g5g) and [CVE-2023-38686](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38686). Reported by Martin Schobert, [Pentagrid AG](https://pentagrid.ch). ([\#574](https://github.com/matrix-org/sydent/issues/574))
+
+
 # Sydent 2.5.5 (2023-06-22)
 
 This version is fixing Docker builds.

diff --git a/changelog.d/574.bugfix b/changelog.d/574.bugfix
diff --git a/pyproject.toml b/pyproject.toml
@@ -69,7 +69,7 @@ ignore_missing_imports = true
 
 [tool.poetry]
 name = "matrix-sydent"
-version = "2.5.5"
+version = "2.5.6"
 description = "Reference Matrix Identity Verification and Lookup Server"
 authors = ["Matrix.org Team and Contributors <packages@matrix.org>"]
 license = "Apache-2.0"