ALT-PU-2018-1973: package matrix-synapse update to version 0.31.2-alt1
Описание
This update upgrades matrix-synapse to version 0.31.2-alt1.
Устраненные уязвимости2
Ссылки3
Связанные уязвимости
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
In Synapse before 0.31.2, unauthorised users can hijack rooms when the ...
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.