MatrixSynapse/changelog.d
Richard van der Hoff cc33d9eee2
Check auth on received events' auth_events (#11001)
Currently, when we receive an event whose auth_events differ from those we expect, we state-resolve between the two state sets, and check that the event passes auth based on the resolved state.

This means that it's possible for us to accept events which don't pass auth at their declared auth_events (or where the auth events themselves were rejected), leading to problems down the line like #10083.

This change means we will:

 * ignore any events where we cannot find the auth events
 * reject any events whose auth events were rejected
 * reject any events which do not pass auth at their declared auth_events.

Together with a whole raft of previous work, this is a partial fix to #9595.

Fixes #6643.

Based on #11009.
2021-10-18 18:29:37 +01:00
..
.gitignore Correct attrs package name in requirements (#3492) 2018-07-07 10:46:59 +10:00
10548.feature Port the Password Auth Providers module interface to the new generic interface (#10548) 2021-10-13 11:21:52 +00:00
10972.misc Add type hints to `synapse.storage.databases.main.client_ips` (#10972) 2021-10-12 13:50:34 +01:00
10975.feature Resolve and share `state_groups` for all historical events in batch (MSC2716) (#10975) 2021-10-13 17:44:00 -05:00
10984.misc Fix logging context warnings when losing replication connection (#10984) 2021-10-15 13:10:58 +01:00
11001.bugfix Check auth on received events' auth_events (#11001) 2021-10-18 18:29:37 +01:00
11009.bugfix Check *all* auth events for room id and rejection (#11009) 2021-10-18 18:28:30 +01:00
11014.misc `_run_push_actions_and_persist_event`: handle no min_depth (#11014) 2021-10-18 17:17:15 +01:00
11024.misc Add support for ubuntu 21.10 "Impish Indri" (#11024) 2021-10-12 11:29:39 -07:00
11027.bugfix Fix 500 error on `/messages` when we accumulate more than 5 backward extremities (#11027) 2021-10-14 18:53:45 -05:00
11035.misc Rearrange the user_directory's `_handle_deltas` function (#11035) 2021-10-13 12:50:00 +00:00
11048.misc Simplify the user admin API tests (#11048) 2021-10-12 20:38:48 +01:00
11054.misc Mark Module API error imports as re-exported and mark Synapse as containing type annotations (#11054) 2021-10-13 08:42:41 +01:00
11055.misc Update `_wrap_in_base_path` type hints to preserve function arguments (#11055) 2021-10-12 18:19:21 +01:00
11056.misc Remove dead code from `MediaFilePaths` (#11056) 2021-10-13 13:41:24 +01:00
11057.misc Add tests for `MediaFilePaths` (#11057) 2021-10-12 18:19:35 +01:00
11065.misc Be more lenient when parsing the version for oEmbed responses. (#11065) 2021-10-13 07:00:07 -04:00
11066.misc Add type hints to synapse.events.*. (#11066) 2021-10-13 07:24:07 -04:00
11068.misc Always dump logs from trial during CI. (#11068) 2021-10-12 20:09:49 +00:00
11069.doc Fix upgrade dead links (#11069) 2021-10-13 14:32:43 +01:00
11070.misc Move experimental & retention config out of the server module. (#11070) 2021-10-15 14:30:48 +00:00
11071.misc Add a test for a workaround concerning the behaviour of third-party rule modules and `SynapseError`s. (#11071) 2021-10-14 14:14:15 +01:00
11075.bugfix Correctly exclude users when making a room public or private (#11075) 2021-10-15 15:53:05 +01:00
11076.misc Fix-up some type hints in the relations tests. (#11076) 2021-10-14 09:19:35 -04:00
11077.bugfix Attempt different character encodings when previewing a URL. (#11077) 2021-10-14 10:17:20 -04:00
11078.bugfix Fix broken export-data admin command and add a test for it to CI (#11078) 2021-10-18 08:14:12 -07:00
11089.bugfix Ensure each charset is attempted only once during media preview. (#11089) 2021-10-14 18:51:44 +00:00
11093.doc Update doc of the allowed characters for registration tokens (#11093) 2021-10-15 09:56:39 +00:00
11096.doc Document Synapse's behaviour when dealing with multiple modules (#11096) 2021-10-18 18:26:52 +02:00
11103.bugfix Don't remove local users from dir when the leave their last room (#11103) 2021-10-18 13:20:04 +00:00