diff options
| author | Matthew Hodgson <matthew@matrix.org> | 2018-05-01 19:05:03 +0100 |
|---|---|---|
| committer | Matthew Hodgson <matthew@matrix.org> | 2018-05-01 19:05:03 +0100 |
| commit | 8ae70969585b898d43f83be913fbf755d6da1717 (patch) | |
| tree | 9632ea3ea8a255fe65a2a82ab9f1af4efa077c99 /CHANGES.rst | |
| parent | Merge branch 'master' into develop (diff) | |
| parent | fix markdown (diff) | |
| download | synapse-8ae70969585b898d43f83be913fbf755d6da1717.tar.xz | |
Merge branch 'release-v0.28.1' into develop
Diffstat (limited to 'CHANGES.rst')
| -rw-r--r-- | CHANGES.rst | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/CHANGES.rst b/CHANGES.rst index 49dac25ca0..0dd2efd9d2 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -4,8 +4,8 @@ Changes in synapse v0.28.1 (2018-05-01) SECURITY UPDATE * Clamp the allowed values of event depth received over federation to be - [0, 2**63 - 1]. This mitigates an attack where malicious events - injected with depth = 2**63 - 1 render rooms unusable. Depth is used to + [0, 2^63 - 1]. This mitigates an attack where malicious events + injected with depth = 2^63 - 1 render rooms unusable. Depth is used to determine the cosmetic ordering of events within a room, and so the ordering of events in such a room will default to using stream_ordering rather than depth (topological_ordering). @@ -14,7 +14,7 @@ SECURITY UPDATE is being implemented to improve how the depth parameter is used. Full details at - https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit# + https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI * Pin Twisted to <18.4 until we stop using the private _OpenSSLECCurve API. |