Source: matrix-synapse
Version: 0.30.0+dfsg-1
Severity: grave
Tags: patch security upstream
Forwarded: https://github.com/matrix-org/synapse/pull/3371
Control: fixed -1 0.31.1+dfsg-1

From

https://matrix.org/blog/2018/06/08/synapse-0-31-1-released/

> v0.31.1 fixes a security bug in the get_missing_events federation API
> where event visibility rules were not applied correctly.

Regards,
Salvatore

Reply via email to