OpenCloud
/
MatrixSynapse
mirror of https://github.com/matrix-org/synapse
1
0
Fork 0
Code Issues Releases Wiki Activity
MatrixSynapse/synapse
History
Neil Johnson 1032393dfb Changes in synapse v0.31.1 (2018-06-08) 
=======================================
 
 v0.31.1 fixes a security bug in the ``get_missing_events`` federation API
 where event visibility rules were not applied correctly.
 
 We are not aware of it being actively exploited but please upgrade asap.
 
 Bug Fixes:
 
 * Fix event filtering in get_missing_events handler (PR #3371)
 -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEETQ1YthIGLQRddG54CTxDAAxPS/QFAlsalP8ACgkQCTxDAAxP
 S/RADw/+NeDu0LjVpS5Uc4ElHgRBuFSm6l2i4z8rZBBlKSYnuq0Em4WMvLloi/JF
 iAvTOYE7OjmF+gNvmsdH1N7hc1lKdQ2gAlpvaQR/5Qz9NtOVmM3WPZxS7n5jZHvD
 hVSxeO9+GQOwK7rJorqrrsnWHQt0OkLHV6WThFdrgZb1JjWCUDTvw+Hei2uMX2aq
 y2mkMG4TLStHwMvL2qw0h+hFtXywXI796qJR73ZxbEn24YD+kOXeEVkIFi2LT0Pj
 cgkg7WWT32JD43/ioumLupZuhCmpRyxn4fi5gIKpXe5kiLsxOdApzNQSwmoJ+WA8
 7zlrWY+0QDN4pbA5ESLitWSWAT50Ul//uM4nwmM4xEBPHdljXvKyHPsaSCeKLvT9
 RT8pc41TQAqSshlXF8zgIAtStnF3oGel3EBBl1mmM9Un1ULnBFwWDZhlIm+ZZGhJ
 MWoAWNG7j8AQuy0BTUAUr76x7t+/cdSqDuyVl1GO1tbDh0DUWoHZGXCUKrAXnn2T
 SbiFigwOLvEADbvkW7L9Je9CVOi2V5Pg/32X9O8YMEiSz+j5PQEiGefyVh/I/QvV
 Ha/atRpZF2OZ+XUOO5DLZMP/XCXpVgvHuskzfU6LvvVQCXgExuJhRD1PrRGeBaWr
 zjJW+rmY+VeredqX7QkTB3XOGLMLGJfx2FeSMb+j0w3a7/iFj+Q=
 =J80S
 -----END PGP SIGNATURE-----

Merge tag 'v0.31.1'

Changes in synapse v0.31.1 (2018-06-08)
=======================================

v0.31.1 fixes a security bug in the ``get_missing_events`` federation API
where event visibility rules were not applied correctly.

We are not aware of it being actively exploited but please upgrade asap.

Bug Fixes:

* Fix event filtering in get_missing_events handler (PR #3371)
 		2018-06-08 15:46:18 +01:00
..
api Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
app Merge pull request #3264 from matrix-org/neil/sign-up-stats 2018-06-01 13:42:01 +00:00
appservice Merge remote-tracking branch 'origin/develop' into rav/use_run_in_background 2018-04-27 14:31:23 +01:00
config Changes in synapse v0.31.0 (2018-06-06) 2018-06-06 12:27:33 +01:00
crypto Fixes #3135 - Replace _OpenSSLECCurve with crypto.get_elliptic_curve (#3157) 2018-04-30 16:21:11 +01:00
events Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
federation federation/send_queue.py: fix usage of LaterGauge 2018-06-03 14:16:17 +03:00
groups Replace some more comparisons with six 2018-05-19 17:56:31 +02:00
handlers Fix event filtering in get_missing_events handler 2018-06-08 14:15:31 +01:00
http update to more consistently use seconds in any metrics or logging 2018-05-28 19:39:27 +10:00
metrics Hopefully, fix LaterGuage error handling 2018-06-04 15:59:14 +01:00
module_api Delete devices in various logout situations 2017-11-29 16:44:35 +00:00
push Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
replication Fix replication metrics 2018-06-04 16:23:05 +01:00
rest Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
server_notices Avoid sending consent notice to guest users 2018-05-25 11:36:43 +01:00
static/client Updates to fallback CAS login to do new token login 2015-11-06 09:57:17 +00:00
storage Merge pull request #3264 from matrix-org/neil/sign-up-stats 2018-06-01 13:42:01 +00:00
streams replace 'except:' with 'except Exception:' 2017-10-23 15:52:32 +01:00
util Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
__init__.py changelog a bump version 2018-06-08 15:21:46 +01:00
event_auth.py Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
notifier.py cleanup pep8 errors 2018-05-22 16:54:22 -05:00
python_dependencies.py replacing portions 2018-05-21 19:47:37 -05:00
server.py Stub out ServerNoticesSender on the workers 2018-05-22 11:54:51 +01:00
server.pyi Send users a server notice about consent 2018-05-22 11:54:51 +01:00
state.py Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307) 2018-05-31 19:03:47 +10:00
types.py In DomainSpecificString, override __repr__ in addition to __str__ 2018-04-10 11:35:29 +02:00
visibility.py Remove preserve_context_over_{fn, deferred} 2017-11-14 11:22:42 +00:00