Package: src:matrix-synapse; Maintainer for src:matrix-synapse is Matrix Packaging Team <pkg-matrix-maintainers@lists.alioth.debian.org>;
Reported by: Salvatore Bonaccorso <carnil@debian.org>
Date: Mon, 11 Jun 2018 04:54:01 UTC
Severity: grave
Tags: patch, security, upstream
Found in version matrix-synapse/0.30.0+dfsg-1
Fixed in version matrix-synapse/0.31.1+dfsg-1
Done: Salvatore Bonaccorso <carnil@debian.org>
Bug is archived. No further changes may be made.
Forwarded to https://github.com/matrix-org/synapse/pull/3371
View this report as an mbox folder, status mbox, maintainer mbox
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Marked as fixed in versions matrix-synapse/0.31.1+dfsg-1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to submit@bugs.debian.org.
(Mon, 11 Jun 2018 04:54:04 GMT) (full text, mbox, link).
Marked Bug as done
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Mon, 11 Jun 2018 04:57:06 GMT) (full text, mbox, link).
Message sent on
to Salvatore Bonaccorso <carnil@debian.org>:
Bug#901293.
(Mon, 11 Jun 2018 04:57:09 GMT) (full text, mbox, link).
Message #14 received at 901293-submitter@bugs.debian.org (full text, mbox, reply):
Changed Bug title to 'matrix-synapse: CVE-2018-12291: Improper event filtering in get_missing_events handler' from 'matrix-synapse: Improper event filtering in get_missing_events handler'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Wed, 13 Jun 2018 18:51:04 GMT) (full text, mbox, link).
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Mon, 15 Oct 2018 07:30:02 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.
Vulmon