Version 0.9.8
MODIFY
CHANGES.md
CHANGES.md
# Changelog
+## Dendrite 0.9.8 (2022-09-12)
+
+### Important
+
+* This is a **security release** to fix a vulnerability where missing events retrieved from other servers did not have their signatures verified in all cases, affecting all versions of Dendrite before 0.9.8. Upgrading to this version is highly recommended. For more information, [see here](https://github.com/matrix-org/dendrite/security/advisories/GHSA-pfw4-xjgm-267c).
+
+### Features
+
+* The built-in NATS Server has been updated to the final 2.9.0 release version
+
+### Fixes
+
+* Dendrite will now correctly verify the signatures of events retrieved using `/get_missing_events`
+
## Dendrite 0.9.7 (2022-09-09)
### Features

MODIFY
internal/version.go
internal/version.go
@@ -17,7 +17,7 @@ var build string
const (
VersionMajor = 0
VersionMinor = 9
- VersionPatch = 7
+ VersionPatch = 8
VersionTag = "" // example: "rc1"
)

Version 0.9.8