Matrix

minor bug fixes but good version number

The Matrix.org homeserver ^[2]^ is currently experiencing a "major outage" ^[1.1]^ — the server is currently offline ^[1.3]^. The timeline of events is currently (2025-09-03T00:14Z) as follows:

• On 2025-09-02T17:39Z, an issue with the matrix.org database was reported by status.matrix.org ^[1.3]^.
• At 2025-09-02T19:01:27Z, the Matrix.org Foundation later reported that the matrix.org secondary database lost its filesystem at 2025-09-02T11:17Z, and subsequently lost its primary database filesystem at 2025-09-02T17:26Z. ^[5]^
• At 2025-09-02T21:39:25Z, the Matrix.org Foundation reported that they were unable to restore the primary database filesystem, so they are restoring a 55TB database snapshot from the previous night. This restoration is expected to take more than 10 hours to recover the data, then greater than 4 hours to restore the data, then greater than 3 hours to catch up on missing traffic. ^[6]^

Last month we issued a Pre-disclosure: Upcoming coordinated security fix for all Matrix server implementations, describing a coordinated release to fix two high severity protocol vulnerabilities (CVE-2025-49090; the other not yet allocated a CVE). That release is now available as of 17:00 UTC on August 11, 2025. Server updates are now available, and MSCs & spec updates will follow on Thursday, August 14, 2025, bringing us to version 1.16 of the spec later in the month, and introducing room version 12.

If your rooms or spaces federate with untrusted servers, you should plan to upgrade your rooms to room version 12. The urgency of this upgrade may depend on your community’s readiness for the changes. At the Foundation, we are aiming to upgrade our rooms in September 2025. There needs to be enough time to allow clients and servers participating in your room to support v12 before upgrading your room.

The new version includes some changes to room creator semantics, which means that choosing which user performs the upgrade needs some careful thought. Using a long-lived, trusted account, such as a moderation bot account, is advised. For more detailed advice, two of the Foundation Governing Board working groups — the Trust & Safety Research & Development Working Group, and the Website & Content Working Group — have collaborated on a guide for upgrading rooms and spaces to version 12. That guide will help you to plan your upgrades and to make them happen.

They still aren't releasing details of the bug yet, but reading between the lines it clearly allows malicious servers to do things they shouldn't be able to. presumably it will become clearer on thursday when they publish the new specs which monday's software releases implement.

Pair a good matrix instance with a good client and you're golden.

October 15 to 18, 2025
Strasbourg, France

https://matrix.org/homeserver/pricing/

Usage limits may change over time as we refine the offering.