Neil Johnson 1032393dfb Changes in synapse v0.31.1 (2018-06-08) ...

=======================================
 
 v0.31.1 fixes a security bug in the ``get_missing_events`` federation API
 where event visibility rules were not applied correctly.
 
 We are not aware of it being actively exploited but please upgrade asap.
 
 Bug Fixes:
 
 * Fix event filtering in get_missing_events handler (PR #3371)
 -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEETQ1YthIGLQRddG54CTxDAAxPS/QFAlsalP8ACgkQCTxDAAxP
 S/RADw/+NeDu0LjVpS5Uc4ElHgRBuFSm6l2i4z8rZBBlKSYnuq0Em4WMvLloi/JF
 iAvTOYE7OjmF+gNvmsdH1N7hc1lKdQ2gAlpvaQR/5Qz9NtOVmM3WPZxS7n5jZHvD
 hVSxeO9+GQOwK7rJorqrrsnWHQt0OkLHV6WThFdrgZb1JjWCUDTvw+Hei2uMX2aq
 y2mkMG4TLStHwMvL2qw0h+hFtXywXI796qJR73ZxbEn24YD+kOXeEVkIFi2LT0Pj
 cgkg7WWT32JD43/ioumLupZuhCmpRyxn4fi5gIKpXe5kiLsxOdApzNQSwmoJ+WA8
 7zlrWY+0QDN4pbA5ESLitWSWAT50Ul//uM4nwmM4xEBPHdljXvKyHPsaSCeKLvT9
 RT8pc41TQAqSshlXF8zgIAtStnF3oGel3EBBl1mmM9Un1ULnBFwWDZhlIm+ZZGhJ
 MWoAWNG7j8AQuy0BTUAUr76x7t+/cdSqDuyVl1GO1tbDh0DUWoHZGXCUKrAXnn2T
 SbiFigwOLvEADbvkW7L9Je9CVOi2V5Pg/32X9O8YMEiSz+j5PQEiGefyVh/I/QvV
 Ha/atRpZF2OZ+XUOO5DLZMP/XCXpVgvHuskzfU6LvvVQCXgExuJhRD1PrRGeBaWr
 zjJW+rmY+VeredqX7QkTB3XOGLMLGJfx2FeSMb+j0w3a7/iFj+Q=
 =J80S
 -----END PGP SIGNATURE-----

Merge tag 'v0.31.1'

Changes in synapse v0.31.1 (2018-06-08)
=======================================

v0.31.1 fixes a security bug in the ``get_missing_events`` federation API
where event visibility rules were not applied correctly.

We are not aware of it being actively exploited but please upgrade asap.

Bug Fixes:

* Fix event filtering in get_missing_events handler (PR #3371)

2018-06-08 15:46:18 +01:00

..

api

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

app

Merge pull request #3264 from matrix-org/neil/sign-up-stats

2018-06-01 13:42:01 +00:00

appservice

Merge remote-tracking branch 'origin/develop' into rav/use_run_in_background

2018-04-27 14:31:23 +01:00

config

Changes in synapse v0.31.0 (2018-06-06)

2018-06-06 12:27:33 +01:00

crypto

Fixes #3135 - Replace _OpenSSLECCurve with crypto.get_elliptic_curve (#3157)

2018-04-30 16:21:11 +01:00

events

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

federation

federation/send_queue.py: fix usage of LaterGauge

2018-06-03 14:16:17 +03:00

groups

Replace some more comparisons with six

2018-05-19 17:56:31 +02:00

handlers

Fix event filtering in get_missing_events handler

2018-06-08 14:15:31 +01:00

http

update to more consistently use seconds in any metrics or logging

2018-05-28 19:39:27 +10:00

metrics

Hopefully, fix LaterGuage error handling

2018-06-04 15:59:14 +01:00

module_api

Delete devices in various logout situations

2017-11-29 16:44:35 +00:00

push

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

replication

Fix replication metrics

2018-06-04 16:23:05 +01:00

rest

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

server_notices

Avoid sending consent notice to guest users

2018-05-25 11:36:43 +01:00

static/client

Updates to fallback CAS login to do new token login

2015-11-06 09:57:17 +00:00

storage

Merge pull request #3264 from matrix-org/neil/sign-up-stats

2018-06-01 13:42:01 +00:00

streams

replace 'except:' with 'except Exception:'

2017-10-23 15:52:32 +01:00

util

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

__init__.py

changelog a bump version

2018-06-08 15:21:46 +01:00

event_auth.py

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

notifier.py

cleanup pep8 errors

2018-05-22 16:54:22 -05:00

python_dependencies.py

replacing portions

2018-05-21 19:47:37 -05:00

server.py

Stub out ServerNoticesSender on the workers

2018-05-22 11:54:51 +01:00

server.pyi

Send users a server notice about consent

2018-05-22 11:54:51 +01:00

state.py

Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)

2018-05-31 19:03:47 +10:00

types.py

In DomainSpecificString, override __repr__ in addition to __str__

2018-04-10 11:35:29 +02:00

visibility.py

Remove preserve_context_over_{fn, deferred}

2017-11-14 11:22:42 +00:00