Merge pull request #5213 from matrix-org/update-changelog-sec-ref

chore: Add CVE-2025-48937 reference to the CHANGELOG
This commit is contained in:
Denis Kasak
2025-06-11 11:36:16 +02:00
committed by GitHub

View File

@@ -11,7 +11,7 @@ All notable changes to this project will be documented in this file.
### Security Fixes
- Check the sender of an event matches owner of session, preventing sender
spoofing by homeserver owners.
[13c1d20](https://github.com/matrix-org/matrix-rust-sdk/commit/13c1d2048286bbabf5e7bc6b015aafee98f04d55) (High, [GHSA-x958-rvg6-956w](https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-x958-rvg6-956w)).
[13c1d20](https://github.com/matrix-org/matrix-rust-sdk/commit/13c1d2048286bbabf5e7bc6b015aafee98f04d55) (High, [CVE-2025-48937](https://www.cve.org/CVERecord?id=CVE-2025-48937), [GHSA-x958-rvg6-956w](https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-x958-rvg6-956w)).
### Bug Fixes
- Remove a wildcard enum variant import which breaks compilation if used with