matrix.org/content/blog/2018/06/2018-06-08-synapse-0-31-1-released.md

+++ title = "Synapse 0.31.1 Released!" path = "/blog/2018/06/08/synapse-0-31-1-released"

[taxonomies] author = ["Neil Johnson"] category = ["Releases"] +++

Folks,

v0.31.1 fixes a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.

We are not aware of it being actively exploited but please upgrade asap.

Sorry for the inconvenience, Synapse and the Matrix spec are still in beta and we still ironing out gaps such as this one.

You can get the release here.

Changes in synapse v0.31.1 (2018-06-08)

v0.31.1 fixes a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.

We are not aware of it being actively exploited but please upgrade asap.

Bug Fixes:

• Fix event filtering in get_missing_events handler (PR #3371)