[Pkg-matrix-maintainers] Bug#901293: matrix-synapse: Improper event filtering in get_missing_events handler

Salvatore Bonaccorso carnil at debian.org
Mon Jun 11 05:50:56 BST 2018


Source: matrix-synapse
Version: 0.30.0+dfsg-1
Severity: grave
Tags: patch security upstream
Forwarded: https://github.com/matrix-org/synapse/pull/3371
Control: fixed -1 0.31.1+dfsg-1

From

https://matrix.org/blog/2018/06/08/synapse-0-31-1-released/

> v0.31.1 fixes a security bug in the get_missing_events federation API
> where event visibility rules were not applied correctly.

Regards,
Salvatore



More information about the Pkg-matrix-maintainers mailing list