Neil Johnson 1032393dfb Changes in synapse v0.31.1 (2018-06-08) ... ======================================= v0.31.1 fixes a security bug in the ``get_missing_events`` federation API where event visibility rules were not applied correctly. We are not aware of it being actively exploited but please upgrade asap. Bug Fixes: * Fix event filtering in get_missing_events handler (PR #3371) -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEETQ1YthIGLQRddG54CTxDAAxPS/QFAlsalP8ACgkQCTxDAAxP S/RADw/+NeDu0LjVpS5Uc4ElHgRBuFSm6l2i4z8rZBBlKSYnuq0Em4WMvLloi/JF iAvTOYE7OjmF+gNvmsdH1N7hc1lKdQ2gAlpvaQR/5Qz9NtOVmM3WPZxS7n5jZHvD hVSxeO9+GQOwK7rJorqrrsnWHQt0OkLHV6WThFdrgZb1JjWCUDTvw+Hei2uMX2aq y2mkMG4TLStHwMvL2qw0h+hFtXywXI796qJR73ZxbEn24YD+kOXeEVkIFi2LT0Pj cgkg7WWT32JD43/ioumLupZuhCmpRyxn4fi5gIKpXe5kiLsxOdApzNQSwmoJ+WA8 7zlrWY+0QDN4pbA5ESLitWSWAT50Ul//uM4nwmM4xEBPHdljXvKyHPsaSCeKLvT9 RT8pc41TQAqSshlXF8zgIAtStnF3oGel3EBBl1mmM9Un1ULnBFwWDZhlIm+ZZGhJ MWoAWNG7j8AQuy0BTUAUr76x7t+/cdSqDuyVl1GO1tbDh0DUWoHZGXCUKrAXnn2T SbiFigwOLvEADbvkW7L9Je9CVOi2V5Pg/32X9O8YMEiSz+j5PQEiGefyVh/I/QvV Ha/atRpZF2OZ+XUOO5DLZMP/XCXpVgvHuskzfU6LvvVQCXgExuJhRD1PrRGeBaWr zjJW+rmY+VeredqX7QkTB3XOGLMLGJfx2FeSMb+j0w3a7/iFj+Q= =J80S -----END PGP SIGNATURE----- Merge tag 'v0.31.1' Changes in synapse v0.31.1 (2018-06-08) ======================================= v0.31.1 fixes a security bug in the ``get_missing_events`` federation API where event visibility rules were not applied correctly. We are not aware of it being actively exploited but please upgrade asap. Bug Fixes: * Fix event filtering in get_missing_events handler (PR #3371)		2018-06-08 15:46:18 +01:00
..
api	Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)	2018-05-31 19:03:47 +10:00
app	Merge pull request #3264 from matrix-org/neil/sign-up-stats	2018-06-01 13:42:01 +00:00
appservice	Merge remote-tracking branch 'origin/develop' into rav/use_run_in_background	2018-04-27 14:31:23 +01:00
config	Changes in synapse v0.31.0 (2018-06-06)	2018-06-06 12:27:33 +01:00
crypto	Fixes #3135 - Replace _OpenSSLECCurve with crypto.get_elliptic_curve (#3157)	2018-04-30 16:21:11 +01:00
events	Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)	2018-05-31 19:03:47 +10:00
federation	federation/send_queue.py: fix usage of LaterGauge	2018-06-03 14:16:17 +03:00
groups	Replace some more comparisons with six	2018-05-19 17:56:31 +02:00
handlers	Fix event filtering in get_missing_events handler	2018-06-08 14:15:31 +01:00
http	update to more consistently use seconds in any metrics or logging	2018-05-28 19:39:27 +10:00
metrics	Hopefully, fix LaterGuage error handling	2018-06-04 15:59:14 +01:00
module_api	Delete devices in various logout situations	2017-11-29 16:44:35 +00:00
push	Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)	2018-05-31 19:03:47 +10:00
replication	Fix replication metrics	2018-06-04 16:23:05 +01:00
rest	Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)	2018-05-31 19:03:47 +10:00
server_notices	Avoid sending consent notice to guest users	2018-05-25 11:36:43 +01:00
static/client	Updates to fallback CAS login to do new token login	2015-11-06 09:57:17 +00:00
storage	Merge pull request #3264 from matrix-org/neil/sign-up-stats	2018-06-01 13:42:01 +00:00
streams	replace 'except:' with 'except Exception:'	2017-10-23 15:52:32 +01:00
util	Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)	2018-05-31 19:03:47 +10:00
__init__.py	changelog a bump version	2018-06-08 15:21:46 +01:00
event_auth.py	Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)	2018-05-31 19:03:47 +10:00
notifier.py	cleanup pep8 errors	2018-05-22 16:54:22 -05:00
python_dependencies.py	replacing portions	2018-05-21 19:47:37 -05:00
server.py	Stub out ServerNoticesSender on the workers	2018-05-22 11:54:51 +01:00
server.pyi	Send users a server notice about consent	2018-05-22 11:54:51 +01:00
state.py	Consistently use six's iteritems and wrap lazy keys/values in list() if they're not meant to be lazy (#3307)	2018-05-31 19:03:47 +10:00
types.py	In DomainSpecificString, override __repr__ in addition to __str__	2018-04-10 11:35:29 +02:00
visibility.py	Remove preserve_context_over_{fn, deferred}	2017-11-14 11:22:42 +00:00