Source: matrix-synapse Version: 0.30.0+dfsg-1 Severity: grave Tags: patch security upstream Forwarded: https://github.com/matrix-org/synapse/pull/3371 Control: fixed -1 0.31.1+dfsg-1
From https://matrix.org/blog/2018/06/08/synapse-0-31-1-released/ > v0.31.1 fixes a security bug in the get_missing_events federation API > where event visibility rules were not applied correctly. Regards, Salvatore