summary refs log tree commit diff
diff options
context:
space:
mode:
authorPatrick Cloke <patrickc@matrix.org>2023-10-10 11:38:56 -0400
committerPatrick Cloke <patrickc@matrix.org>2023-10-10 11:38:56 -0400
commit5f12090fd7ee5e062620ef706f36bdd2a2e53896 (patch)
treeef917adfc0fec28832805cfb8017f7e7613fecab
parentAdd security advisory note to the changelog (diff)
downloadsynapse-5f12090fd7ee5e062620ef706f36bdd2a2e53896.tar.xz
Add CVE number for advisory GHSA-5chr-wjw5-3gq4.
-rw-r--r--CHANGES.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/CHANGES.md b/CHANGES.md
index 0ee3970e2b..6f42ebba93 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -7,7 +7,7 @@ However, please take note of the security advisory that follows.
 
 The following issue is fixed in 1.94.0 (and RC).
 
-- [GHSA-5chr-wjw5-3gq4](https://github.com/matrix-org/synapse/security/advisories/GHSA-5chr-wjw5-3gq4) — Moderate Severity
+- [GHSA-5chr-wjw5-3gq4](https://github.com/matrix-org/synapse/security/advisories/GHSA-5chr-wjw5-3gq4) / [CVE-2023-45129](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45129) — Moderate Severity
 
   A malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service.