diff options
| author | Brendan Abolivier <babolivier@matrix.org> | 2021-05-11 14:09:46 +0100 |
|---|---|---|
| committer | Brendan Abolivier <babolivier@matrix.org> | 2021-05-11 14:09:46 +0100 |
| commit | d1473f7362e9b146dbd256076c8e3c7d163e7d94 (patch) | |
| tree | 12ac731328b325992ab80b1c8cecf4ed79f7935b | |
| parent | 1.33.2 (diff) | |
| download | synapse-release-v1.33.2.tar.xz | |
Use link to advisory rather than to the CVE repo v1.33.2 github/release-v1.33.2 release-v1.33.2
| -rw-r--r-- | CHANGES.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/CHANGES.md b/CHANGES.md index 7ae0e7b3c1..93efa3ce56 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -6,7 +6,7 @@ Due to the security issue highlighted below, server administrators are encourage Security advisory ----------------- -This release fixes a denial of service attack ([CVE-2021-29471](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29471)) against Synapse's push rules implementation. Server admins are encouraged to upgrade. +This release fixes a denial of service attack ([CVE-2021-29471](https://github.com/matrix-org/synapse/security/advisories/GHSA-x345-32rc-8h85)) against Synapse's push rules implementation. Server admins are encouraged to upgrade. Internal Changes ---------------- |