summary refs log tree commit diff
path: root/CHANGES.rst
diff options
context:
space:
mode:
authorNeil Johnson <neil@matrix.org>2018-06-08 15:47:11 +0100
committerNeil Johnson <neil@matrix.org>2018-06-08 15:47:11 +0100
commited5a0780a4c9d4a2da706b203c7c9d417046bc7b (patch)
tree877e0d2d71ad378590cdef238628abde1b3da296 /CHANGES.rst
parentMerge pull request #3372 from matrix-org/rav/better_verification_logging (diff)
parentMerge tag 'v0.31.1' (diff)
downloadsynapse-ed5a0780a4c9d4a2da706b203c7c9d417046bc7b.tar.xz
Merge branch 'master' into develop
Diffstat (limited to 'CHANGES.rst')
-rw-r--r--CHANGES.rst12
1 files changed, 12 insertions, 0 deletions
diff --git a/CHANGES.rst b/CHANGES.rst
index 3a2a30873f..4047f50aa5 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -1,3 +1,15 @@
+Changes in synapse v0.31.1 (2018-06-08)
+=======================================
+
+v0.31.1 fixes a security bug in the ``get_missing_events`` federation API
+where event visibility rules were not applied correctly.
+
+We are not aware of it being actively exploited but please upgrade asap.
+
+Bug Fixes:
+
+* Fix event filtering in get_missing_events handler (PR #3371)
+
 Changes in synapse v0.31.0 (2018-06-06)
 =======================================