summary refs log tree commit diff
path: root/CHANGES.rst
diff options
context:
space:
mode:
authorRichard van der Hoff <richard@matrix.org>2018-06-14 16:36:01 +0100
committerRichard van der Hoff <richard@matrix.org>2018-06-14 16:36:01 +0100
commit9a793f861c252e09ec5e15986a2ad01d3586d8ce (patch)
treefa57f00eea83a3ac2e2d48d1f0b6aaf5994e1839 /CHANGES.rst
parentadd a last seen metric (#3396) (diff)
parentMerge tag 'v0.31.2' (diff)
downloadsynapse-9a793f861c252e09ec5e15986a2ad01d3586d8ce.tar.xz
Merge branch 'master' into develop
Diffstat (limited to 'CHANGES.rst')
-rw-r--r--CHANGES.rst9
1 files changed, 9 insertions, 0 deletions
diff --git a/CHANGES.rst b/CHANGES.rst
index 4047f50aa5..70fc5af4c1 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -1,3 +1,12 @@
+Changes in synapse v0.31.2 (2018-06-14)
+=======================================
+
+SECURITY UPDATE: Prevent unauthorised users from setting state events in a room
+when there is no ``m.room.power_levels`` event in force in the room. (PR #3397)
+
+Discussion around the Matrix Spec change proposal for this change can be
+followed at https://github.com/matrix-org/matrix-doc/issues/1304.
+
 Changes in synapse v0.31.1 (2018-06-08)
 =======================================