matrix-synapse/_service

23 lines
857 B
Plaintext
Raw Normal View History

<services>
<service name="obs_scm" mode="disabled">
<param name="filename">matrix-synapse</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="url">https://github.com/matrix-org/synapse.git</param>
<param name="scm">git</param>
Accepting request 985625 from home:darix:apps - Update to 1.61.1 This patch release fixes a security issue regarding URL previews, affecting all prior versions of Synapse. Server administrators are encouraged to update Synapse as soon as possible. We are not aware of these vulnerabilities being exploited in the wild. Server administrators who are unable to update Synapse may use the workarounds described in the linked GitHub Security Advisory below. The following issue is fixed in 1.61.1. GHSA-22p3-qrh9-cx32 / CVE-2022-31052 Synapse instances with the url_preview_enabled homeserver config option set to true are affected. URL previews of some web pages can lead to unbounded recursion, causing the request to either fail, or in some cases crash the running Synapse process. Requesting URL previews requires authentication. Nevertheless, it is possible to exploit this maliciously, either by malicious users on the homeserver, or by remote users sending URLs that a local user's client may automatically request a URL preview for. Homeservers with the url_preview_enabled configuration option set to false (the default) are unaffected. Instances with the enable_media_repo configuration option set to false are also unaffected, as this also disables URL preview functionality. Fixed by fa1308061802ac7b7d20e954ba7372c5ac292333. - force python 3.10 on TW OBS-URL: https://build.opensuse.org/request/show/985625 OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=228
2022-06-28 18:33:36 +02:00
<param name="revision">v1.61.1</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="versionrewrite-replacement">\1</param>
Accepting request 768057 from home:darix:apps - update to 1.9.1 Fix bug where setting mau_limit_reserved_threepids config would cause Synapse to refuse to start. (#6793) - package cleanup - make sure we have all libraries to actually install the package: - buildrequires all runtime requirements - (build)require python3-typing_extensions - having it use the python package name is not really useful here. - refreshed and renamed better-paths.patch to matrix-synapse-1.4.1-paths.patch - also fix existing synapse user - group to synapse instead of nogroup - home directory to /var/lib/matrix-synapse - shell to /bin/false (which actually exists) - improvements to the logging configuration: - install copy of the current /etc/matrix-synapse/log.yaml as /etc/matrix-synapse/log.systemd.yaml - install /etc/matrix-synapse/log.file.yaml which logs to /var/log/matrix-synapse/homeserver.log - add the log directory /var/log/matrix-synapse/ - added README.SUSE - better way to bootstrap a new config: 1. ExecStartPre would have never worked anyway 2. added %{_sbindir}/matrix-synapse-generate-config Usage: %{_sbindir}/matrix-synapse-generate-config servername - fix group and shell for the synapse user - added better-paths.patch - put the pid file into /run/matrix-synapse/ - use a default logging config in /etc/matrix-synapse/log.yaml to have systemd logging by default - use full path in the service file - actually use source 50 instead of the service file in the tarball - make permissions tighter on the config files as it contains passwords and other secrets: root:synapse u=rwX,g=rX,o= OBS-URL: https://build.opensuse.org/request/show/768057 OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=111
2020-02-03 11:56:06 +01:00
<!--
<param name="revision">v1.62.0rc1</param>
Accepting request 768057 from home:darix:apps - update to 1.9.1 Fix bug where setting mau_limit_reserved_threepids config would cause Synapse to refuse to start. (#6793) - package cleanup - make sure we have all libraries to actually install the package: - buildrequires all runtime requirements - (build)require python3-typing_extensions - having it use the python package name is not really useful here. - refreshed and renamed better-paths.patch to matrix-synapse-1.4.1-paths.patch - also fix existing synapse user - group to synapse instead of nogroup - home directory to /var/lib/matrix-synapse - shell to /bin/false (which actually exists) - improvements to the logging configuration: - install copy of the current /etc/matrix-synapse/log.yaml as /etc/matrix-synapse/log.systemd.yaml - install /etc/matrix-synapse/log.file.yaml which logs to /var/log/matrix-synapse/homeserver.log - add the log directory /var/log/matrix-synapse/ - added README.SUSE - better way to bootstrap a new config: 1. ExecStartPre would have never worked anyway 2. added %{_sbindir}/matrix-synapse-generate-config Usage: %{_sbindir}/matrix-synapse-generate-config servername - fix group and shell for the synapse user - added better-paths.patch - put the pid file into /run/matrix-synapse/ - use a default logging config in /etc/matrix-synapse/log.yaml to have systemd logging by default - use full path in the service file - actually use source 50 instead of the service file in the tarball - make permissions tighter on the config files as it contains passwords and other secrets: root:synapse u=rwX,g=rX,o= OBS-URL: https://build.opensuse.org/request/show/768057 OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=111
2020-02-03 11:56:06 +01:00
<param name="versionrewrite-pattern">v([\.\d]+)(rc.*)</param>
<param name="versionrewrite-replacement">\1~\2</param>
-->
</service>
<service name="set_version" mode="disabled"/>
<service name="tar" mode="buildtime"/>
<service name="recompress" mode="buildtime">
<param name="compression">xz</param>
<param name="file">*.tar</param>
</service>
</services>