Update the changelogdebian/1.47.1-1

1 files changed, 13 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index 2a1890a5..7b360b84 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+matrix-synapse (1.47.1-1) unstable; urgency=high
+
+  * New upstream security release.
+  * CVE-2021-41281: Path traversal when downloading remote media:
+    Synapse instances with the media repository enabled can be tricked
+    into downloading a file from a remote server into an arbitrary
+    directory, potentially outside the media store directory.
+    Homeservers with the media repository disabled or configured with a
+    federation whitelist are unaffected.
+    (GHSA-3hfw-x7gx-437c)
+
+ -- Andrej Shadura <andrewsh@debian.org>  Tue, 23 Nov 2021 13:17:43 +0100
+
 matrix-synapse (1.47.0-2) unstable; urgency=medium
 
   * Require a Python 3.10-compatible version of frozendict.