diff --git a/_service b/_service
index 040f53b..660c8c7 100644
--- a/_service
+++ b/_service
@@ -4,8 +4,9 @@
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="url">https://github.com/matrix-org/synapse.git</param>
     <param name="scm">git</param>
-    <param name="revision">v1.11.1</param>
+    <param name="revision">v1.17.0</param>
     <param name="versionrewrite-pattern">v(.*)</param>
+    <param name="versionrewrite-replacement">\1</param>
     <!--
     <param name="versionrewrite-pattern">v([\.\d]+)(rc.*)</param>
     <param name="versionrewrite-replacement">\1~\2</param>
diff --git a/matrix-synapse-1.11.1.obscpio b/matrix-synapse-1.11.1.obscpio
deleted file mode 100644
index fad61ba..0000000
--- a/matrix-synapse-1.11.1.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7ac262ab6ee74268659529697ae41be6fb64efae2a5171060718bace41ef1653
-size 26549261
diff --git a/matrix-synapse-1.17.0.obscpio b/matrix-synapse-1.17.0.obscpio
new file mode 100644
index 0000000..bb7ce8c
--- /dev/null
+++ b/matrix-synapse-1.17.0.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:74dcda718195da0fcf3399b5bb9bd2eba77e309629ef58ecbfd97414e018ce56
+size 27525133
diff --git a/matrix-synapse-test.spec b/matrix-synapse-test.spec
index 15df0fc..834b1f3 100644
--- a/matrix-synapse-test.spec
+++ b/matrix-synapse-test.spec
@@ -32,7 +32,7 @@
 
 %define         pkgname matrix-synapse
 Name:           %{pkgname}-test
-Version:        1.11.1
+Version:        1.17.0
 Release:        0
 Summary:        Test package for %{pkgname}
 License:        Apache-2.0
diff --git a/matrix-synapse.changes b/matrix-synapse.changes
index 350a264..471fbb5 100644
--- a/matrix-synapse.changes
+++ b/matrix-synapse.changes
@@ -1,3 +1,657 @@
+-------------------------------------------------------------------
+Mon Jul 13 11:55:06 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- allow newer prometheus client (follow up to change in the code) 
+
+-------------------------------------------------------------------
+Mon Jul 13 11:19:25 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.17.0 
+  - Bugfixes
+    - Fix inconsistent handling of upper and lower case in email
+      addresses when used as identifiers for login, etc.
+      Contributed by @dklimpel. (#7021)
+    - Fix "Tried to close a non-active scope!" error messages when
+      opentracing is enabled. (#7732)
+    - Fix incorrect error message when database CTYPE was set
+      incorrectly. (#7760)
+    - Fix to not ignore set_tweak actions in Push Rules that have
+      no value, as permitted by the specification. (#7766)
+    - Fix synctl to handle empty config files correctly.
+      Contributed by @kotovalexarian. (#7779)
+    - Fixes a long standing bug in worker mode where worker
+      information was saved in the devices table instead of the
+      original IP address and user agent. (#7797)
+    - Fix 'stuck invites' which happen when we are unable to reject
+      a room invite received over federation. (#7804, #7809, #7810)
+  - Updates to the Docker image
+    - Include libwebp in the Docker file to properly handle webp
+      image uploads. (#7791)
+  - Improved Documentation
+    - Improve the documentation of the non-standard JSON web token
+      login type. (#7776)
+    - Update doc links for caddy. Contributed by Nicolai Søborg.
+      (#7789)
+  - Internal Changes
+    - Refactor getting replication updates from database. (#7740)
+    - Send push notifications with a high or low priority depending
+      upon whether they may generate user-observable effects.
+      (#7765)
+    - Use symbolic names for replication stream names. (#7768)
+    - Add early returns to _check_for_soft_fail. (#7769)
+    - Fix up synapse.handlers.federation to pass mypy. (#7770)
+    - Convert the appserver handler to async/await. (#7775)
+    - Allow to use higher versions of prometheus_client <0.9.0
+      which are expected to introduce no breaking changes.
+      Contributed by Oliver Kurz. (#7780)
+    - Update linting scripts and codebase to be compatible with
+      isort v5. (#7786)
+    - Stop populating unused table local_invites. (#7793)
+    - Ensure that strings (not bytes) are passed into JSON
+      serialization. (#7799)
+    - Switch from simplejson to the standard library json. (#7800)
+    - Add signing_key property to HomeServer to save code
+      duplication. (#7805)
+    - Improve stacktraces from exceptions in background processes.
+      (#7808)
+    - Fix various spelling errors in comments and log lines.
+      (#7811)
+
+-------------------------------------------------------------------
+Fri Jul 10 12:03:25 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.16.1 
+  - Drop table local_rejections_stream which was incorrectly added
+    in Synapse 1.16.0. (#7816, b1beb3ff5)
+
+-------------------------------------------------------------------
+Wed Jul  8 10:28:25 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.16.0
+  - Features
+    - Add an option to enable encryption by default for new rooms.
+      (#7639)
+    - Add support for running multiple media repository workers.
+      See docs/workers.md for instructions. (#7706)
+    - Media can now be marked as safe from quarantined. (#7718)
+    - Expand the configuration options for auto-join rooms. (#7763)
+  - Bugfixes
+    - Remove user_id from the response to GET
+      /_matrix/client/r0/presence/{userId}/status to match the
+      specification. (#7606)
+    - In worker mode, ensure that replicated data has not already
+      been received. (#7648)
+    - Fix intermittent exception during startup, introduced in
+      Synapse 1.14.0. (#7663)
+    - Include a user-agent for federation and well-known requests.
+      (#7677)
+    - Accept the proper field (phone) for the m.id.phone identifier
+      type. The legacy field of number is still accepted as a
+      fallback. Bug introduced in v0.20.0. (#7687)
+    - Fix "Starting db txn 'get_completed_ui_auth_stages' from
+      sentinel context" warning. The bug was introduced in 1.13.0.
+      (#7688)
+    - Compare the URI and method during user interactive
+      authentication (instead of the URI twice). Bug introduced in
+      1.13.0. (#7689)
+    - Fix a long standing bug where the response to the GET
+      room_keys/version endpoint had the incorrect type for the
+      etag field. (#7691)
+    - Fix logged error during device resync in opentracing. Broke
+      in v1.14.0. (#7698)
+    - Do not break push rule evaluation when receiving an event
+      with a non-string body. This is a long-standing bug. (#7701)
+    - Fixs a long standing bug which resulted in an exception:
+      "TypeError: argument of type 'ObservableDeferred' is not
+      iterable". (#7708)
+    - The synapse_port_db script no longer fails when the
+      ui_auth_sessions table is non-empty. This bug has existed
+      since v1.13.0. (#7711)
+    - Synapse will now fetch media from the proper specified URL
+      (using the r0 prefix instead of the unspecified v1). (#7714)
+    - Fix the tables ignored by synapse_port_db to be in sync the
+      current database schema. (#7717)
+    - Fix missing Content-Length on HTTP responses from the metrics
+      handler. (#7730)
+    - Fix large state resolutions from stalling Synapse for seconds
+      at a time. (#7735, #7746)
+  - Improved Documentation
+    - Spelling correction in sample_config.yaml. (#7652)
+    - Added instructions for how to use Keycloak via OpenID Connect
+      to authenticate with Synapse. (#7659)
+    - Corrected misspelling of PostgreSQL. (#7724)
+    - Deprecations and Removals
+    - Deprecate m.login.jwt login method in favour of
+      org.matrix.login.jwt, as m.login.jwt is not part of the
+      Matrix spec. (#7675)
+  - Internal Changes
+    - Refactor getting replication updates from database. (#7636)
+    - Clean-up the login fallback code. (#7657)
+    - Increase the default SAML session expiry time to 15 minutes.
+      (#7664)
+    - Convert the device message and pagination handlers to
+      async/await. (#7678)
+    - Convert typing handler to async/await. (#7679)
+    - Require parameterized package version to be at least 0.7.0.
+      (#7680)
+    - Refactor handling of listeners configuration settings.
+      (#7681)
+    - Replace uses of six.iterkeys/iteritems/itervalues with
+      keys()/items()/values(). (#7692)
+    - Add support for using rust-python-jaeger-reporter library to
+      reduce jaeger tracing overhead. (#7697)
+    - Make Tox actions work on Debian 10. (#7703)
+    - Replace all remaining uses of six with native Python 3
+      equivalents. Contributed by @ilmari. (#7704)
+    - Fix broken link in sample config. (#7712)
+    - Speed up state res v2 across large state differences. (#7725)
+    - Convert directory handler to async/await. (#7727)
+    - Move flake8 to the end of scripts-dev/lint.sh as it takes the
+      longest and could cause the script to exit early. (#7738)
+    - Explain the "test" conditional requirement for dependencies
+      is not all of the modules necessary to run the unit tests.
+      (#7751)
+    - Add some metrics for inbound and outbound federation
+      latencies: synapse_federation_server_pdu_process_time and
+      synapse_event_processing_lag_by_event. (#7755)(#7771)
+
+-------------------------------------------------------------------
+Thu Jul  2 15:34:54 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.15.2
+  - Security
+    - A malicious homeserver could force Synapse to reset the state
+      in a room to a small subset of the correct state. This
+      affects all Synapse deployments which federate with untrusted
+      servers. (96e9afe6)
+    - HTML pages served via Synapse were vulnerable to clickjacking
+      attacks. This predominantly affects homeservers with
+      single-sign-on enabled, but all server administrators are
+      encouraged to upgrade. (ea26e9a9)
+
+-------------------------------------------------------------------
+Tue Jun 16 18:36:01 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.15.1 
+  - Fix a bug introduced in v1.15.0 that would crash Synapse on
+    start when using certain password auth providers. (#7684)
+  - Fix a bug introduced in v1.15.0 which meant that some 3PID
+    management endpoints were not accessible on the correct URL. 
+
+-------------------------------------------------------------------
+Thu Jun 11 14:28:57 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.15.0 
+  - Features
+    - Advertise support for Client-Server API r0.6.0 and remove
+      related unstable feature flags. (#6585)
+    - Add an option to disable autojoining rooms for guest
+      accounts. (#6637)
+    - For SAML authentication, add the ability to pass email
+      addresses to be added to new users' accounts via SAML
+      attributes. Contributed by Christopher Cooper. (#7385)
+    - Add admin APIs to allow server admins to manage users'
+      devices. Contributed by @dklimpel. (#7481)
+    - Add support for generating thumbnails for WebP images.
+      Previously, users would see an empty box instead of preview
+      image. Contributed by @WGH-. (#7586)
+    - Support the standardized m.login.sso user-interactive
+      authentication flow. (#7630)
+  - Bugfixes
+    - Allow new users to be registered via the admin API even if
+      the monthly active user limit has been reached. Contributed
+      by @dklimpel. (#7263)
+    - Fix email notifications not being enabled for new users when
+      created via the Admin API. (#7267)
+    - Fix str placeholders in an instance of
+      PrepareDatabaseException. Introduced in Synapse v1.8.0.
+      (#7575)
+    - Fix a bug in automatic user creation during first time login
+      with m.login.jwt. Regression in v1.6.0. Contributed by @olof.
+      (#7585)
+    - Fix a bug causing the cross-signing keys to be ignored when
+      resyncing a device list. (#7594)
+    - Fix metrics failing when there is a large number of active
+      background processes. (#7597)
+    - Fix bug where returning rooms for a group would fail if it
+      included a room that the server was not in. (#7599)
+    - Fix duplicate key violation when persisting read markers.
+      (#7607)
+    - Prevent an entire iteration of the device list resync loop
+      from failing if one server responds with a malformed result.
+      (#7609)
+    - Fix exceptions when fetching events from a remote host fails.
+      (#7622)
+    - Make synctl restart start synapse if it wasn't running.
+      (#7624)
+    - Pass device information through to the login endpoint when
+      using the login fallback. (#7629)
+    - Advertise the m.login.token login flow when OpenID Connect is
+      enabled. (#7631)
+    - Fix bug in account data replication stream. (#7656)
+  - Improved Documentation
+    - Update the OpenBSD installation instructions. (#7587)
+    - Advertise Python 3.8 support in setup.py. (#7602)
+    - Add a link to #synapse:matrix.org in the troubleshooting
+      section of the README. (#7603)
+    - Clarifications to the admin api documentation. (#7647)
+  - Internal Changes
+    - Convert the identity handler to async/await. (#7561)
+    - Improve query performance for fetching state from a
+      PostgreSQL database. Contributed by @ilmari. (#7567)
+    - Speed up processing of federation stream RDATA rows. (#7584)
+    - Add comment to systemd example to show postgresql dependency.
+      (#7591)
+    - Refactor Ratelimiter to limit the amount of expensive config
+      value accesses. (#7595)
+    - Convert groups handlers to async/await. (#7600)
+    - Clean up exception handling in SAML2ResponseResource. (#7614)
+    - Check that all asynchronous tasks succeed and general cleanup
+      of MonthlyActiveUsersTestCase and TestMauLimit. (#7619)
+    - Convert get_user_id_by_threepid to async/await. (#7620)
+    - Switch to upstream dh-virtualenv rather than our fork for
+      Debian package builds. (#7621)
+    - Update CI scripts to check the number in the newsfile
+      fragment. (#7623)
+    - Check if the localpart of a Matrix ID is reserved for guest
+      users earlier in the registration flow, as well as when
+      responding to requests to /register/available. (#7625)
+    - Minor cleanups to OpenID Connect integration. (#7628)
+    - Attempt to fix flaky test:
+      PhoneHomeStatsTestCase.test_performance_100. (#7634)
+    - Fix typos of m.olm.curve25519-aes-sha2 and
+      m.megolm.v1.aes-sha2 in comments, test files. (#7637)
+    - Convert user directory, state deltas, and stats handlers to
+      async/await. (#7640)
+    - Remove some unused constants. (#7644)
+    - Fix type information on assert_*_is_admin methods. (#7645)
+    - Convert registration handler to async/await. (#7649)
+
+-------------------------------------------------------------------
+Thu Jun  4 20:54:32 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- make sure we do not pull too new prometheus bindings
+
+-------------------------------------------------------------------
+Thu May 28 11:05:04 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.14.0
+  - Features
+    - Synapse's cache factor can now be configured in
+      homeserver.yaml by the caches.global_factor setting.
+      Additionally, caches.per_cache_factors controls the cache
+      factors for individual caches. (#6391)
+    - Add OpenID Connect login/registration support. Contributed by
+      Quentin Gliech, on behalf of les Connecteurs. (#7256, #7457)
+    - Add room details admin endpoint. Contributed by Awesome
+      Technologies Innovationslabor GmbH. (#7317)
+    - Allow for using more than one spam checker module at once.
+      (#7435)
+    - Add additional authentication checks for m.room.power_levels
+      event per MSC2209. (#7502)
+    - Implement room version 6 per MSC2240. (#7506)
+    - Add highly experimental option to move event persistence off
+      master. (#7281, #7374, #7436, #7440, #7475, #7490, #7491,
+      #7492, #7493, #7495, #7515, #7516, #7517, #7542)
+  - Bugfixes
+    - Fix cache config to not apply cache factor to event cache.
+      Regression in v1.14.0rc1. (#7578)
+    - Fix bug where ReplicationStreamer was not always started when
+      replication was enabled. Bug introduced in v1.14.0rc1.
+      (#7579)
+    - Fix specifying individual cache factors for caches with
+      special characters in their name. Regression in v1.14.0rc1.
+      (#7580)
+    - Fix a bug where event updates might not be sent over
+      replication to worker processes after the stream falls
+      behind. (#7384)
+    - Allow expired user accounts to log out their device sessions.
+      (#7443)
+    - Fix a bug that would cause Synapse not to resync out-of-sync
+      device lists. (#7453)
+    - Prevent rooms with 0 members or with invalid version strings
+      from breaking group queries. (#7465)
+    - Workaround for an upstream Twisted bug that caused Synapse to
+      become unresponsive after startup. (#7473)
+    - Fix Redis reconnection logic that can result in missed
+      updates over replication if master reconnects to Redis
+      without restarting. (#7482)
+    - When sending m.room.member events, omit displayname and
+      avatar_url if they aren't set instead of setting them to
+      null. Contributed by Aaron Raimist. (#7497)
+    - Fix incorrect method label on
+      synapse_http_matrixfederationclient_{requests,responses}
+      prometheus metrics. (#7503)
+    - Ignore incoming presence events from other homeservers if
+      presence is disabled locally. (#7508)
+    - Fix a long-standing bug that broke the update remote profile
+      background process. (#7511)
+    - Hash passwords as early as possible during password reset.
+      (#7538)
+    - Fix bug where a local user leaving a room could fail under
+      rare circumstances. (#7548)
+    - Fix "Missing RelayState parameter" error when using user
+      interactive authentication with SAML for some SAML providers.
+      (#7552)
+    - Fix exception 'GenericWorkerReplicationHandler' object has no
+      attribute 'send_federation_ack', introduced in v1.13.0.
+      (#7564)
+    - synctl now warns if it was unable to stop Synapse and will
+      not attempt to start Synapse if nothing was stopped.
+      Contributed by Romain Bouyé. (#6590)
+  - Documentation
+    - Fix the OIDC client_auth_method value in the sample config.
+      (#7581)
+    - Update information about mapping providers for SAML and
+      OpenID. (#7458)
+    - Add additional reverse proxy example for Caddy v2.
+      Contributed by Jeff Peeler. (#7463)
+    - Fix copy-paste error in ServerNoticesConfig docstring.
+      Contributed by @ptman. (#7477)
+    - Improve the formatting of reverse_proxy.md. (#7514)
+    - Change the systemd worker service to check that the worker
+      config file exists instead of silently failing. Contributed
+      by David Vo. (#7528)
+    - Minor clarifications to the TURN docs. (#7533)
+  - Internal changes
+    - Add typing annotations in synapse.federation. (#7382)
+    - Convert the room handler to async/await. (#7396)
+    - Improve performance of get_e2e_cross_signing_key. (#7428)
+    - Improve performance of mark_as_sent_devices_by_remote.
+      (#7429, #7562)
+    - Add type hints to the SAML handler. (#7445)
+    - Remove storage method get_hosts_in_room that is no longer
+      called anywhere. (#7448)
+    - Fix some typos in the notice_expiry templates. (#7449)
+    - Convert the federation handler to async/await. (#7459)
+    - Convert the search handler to async/await. (#7460)
+    - Add type hints to synapse.event_auth. (#7505)
+    - Convert the room member handler to async/await. (#7507)
+    - Add type hints to room member handler. (#7513)
+    - Fix typing annotations in tests.replication. (#7518)
+    - Remove some redundant Python 2 support code. (#7519)
+    - All endpoints now respond with a 200 OK for OPTIONS requests.
+      (#7534, #7560)
+    - Synapse now exports detailed allocator statistics and basic
+      GC timings as Prometheus metrics (pypy_gc_time_seconds_total
+      and pypy_memory_bytes) when run under PyPy. Contributed by
+      Ivan Shapovalov. (#7536)
+    - Remove Ubuntu Cosmic and Disco from the list of distributions
+      which we provide .debs for, due to end-of-life. (#7539)
+    - Make worker processes return a stubbed-out response to GET
+      /presence requests. (#7545)
+    - Optimise some references to hs.config. (#7546)
+    - On upgrade room only send canonical alias once. (#7547)
+    - Fix some indentation inconsistencies in the sample config.
+      (#7550)
+    - Include synapse.http.site in type checking. (#7553)
+    - Fix some test code to not mangle stacktraces, to make it
+      easier to debug errors. (#7554)
+    - Refresh apt cache when building dh_virtualenv docker image.
+      (#7555)
+    - Stop logging some expected HTTP request errors as exceptions.
+      (#7556, #7563)
+    - Convert sending mail to async/await. (#7557)
+    - Simplify reap_monthly_active_users. (#7558)
+
+-------------------------------------------------------------------
+Tue May 19 14:54:57 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.13.0
+  This release brings some potential changes necessary for certain
+  configurations of Synapse:
+
+  - If your Synapse is configured to use SSO and have a custom
+    sso_redirect_confirm_template_dir configuration option set, you
+    will need to duplicate the new sso_auth_confirm.html,
+    sso_auth_success.html and sso_account_deactivated.html
+    templates into that directory.
+  - Synapse plugins using the complete_sso_login method of
+    synapse.module_api.ModuleApi should instead switch to the
+    async/await version, complete_sso_login_async, which includes
+    additional checks. The former version is now deprecated.
+  - A bug was introduced in Synapse 1.4.0 which could cause the
+    room directory to be incomplete or empty if Synapse was
+    upgraded directly from v1.2.1 or earlier, to versions between
+    v1.4.0 and v1.12.x.
+
+  Please review UPGRADE.rst for more details on these changes and
+  for general upgrade guidance.
+
+  For the complete list of changes please refer to
+  https://github.com/matrix-org/synapse/releases/tag/v1.13.0
+
+-------------------------------------------------------------------
+Thu Apr 23 15:51:48 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.12.4
+  - Features:
+    - Always send users their own device updates. (#7160)
+    - Add support for handling GET requests for account_data on a
+      worker. (#7311)
+  - Bugfixes:
+    - Fix a bug that prevented cross-signing with users on
+      worker-mode synapses. (#7255)
+    - Do not treat display names as globs in push rules. (#7271)
+    - Fix a bug with cross-signing devices belonging to remote
+      users who did not share a room with any user on the local
+      homeserver. (#7289)
+
+-------------------------------------------------------------------
+Fri Apr  3 12:21:52 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.12.3
+  - Remove the pin to Pillow 7.0 which was introduced in Synapse
+    1.12.2, and correctly fix the issue with building the Debian
+    packages. (#7212)
+
+-------------------------------------------------------------------
+Thu Apr  2 18:27:05 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.12.2
+  - This release fixes an issue with building the debian packages.
+
+-------------------------------------------------------------------
+Thu Apr  2 16:28:51 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.12.1
+  - Fix starting workers when federation sending not split out.
+    (#7133). Introduced in v1.12.0.
+  - Avoid importing sqlite3 when using the postgres backend.
+    Contributed by David Vo. (#7155). Introduced in v1.12.0rc1.
+  - Fix a bug which could cause outbound federation traffic to stop
+    working if a client uploaded an incorrect e2e device signature.
+    (#7177). Introduced in v1.11.0.
+
+-------------------------------------------------------------------
+Tue Mar 24 15:31:47 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- use %requires_eq for runtime dependencies to make sure we always
+  use the versions we built with. we ran into cases where the
+  distro package was new enough according to the setup dependencies
+  but those were not up2date with the actual code.
+
+-------------------------------------------------------------------
+Mon Mar 23 14:36:36 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.12.0
+  Synapse may be vulnerable to request-smuggling attacks when it is
+  used with a reverse-proxy. The vulnerabilties are fixed in
+  Twisted 20.3.0, and are described in
+  [CVE-2020-10108](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10108)
+  and
+  [CVE-2020-10109](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10109).
+  For a good introduction to this class of request-smuggling
+  attacks, see
+  https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn.
+
+  We are not aware of these vulnerabilities being exploited in the
+  wild, and do not believe that they are exploitable with current
+  versions of any reverse proxies. Nevertheless, we recommend that
+  all Synapse administrators ensure that they have the latest
+  versions of the Twisted library to ensure that their installation
+  remains secure.
+
+  - Features
+    - Changes related to room alias management
+      ([MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432)):
+      - Publishing/removing a room from the room directory now
+        requires the user to have a power level capable of
+        modifying the canonical alias, instead of the room aliases.
+        ([\#6965](https://github.com/matrix-org/synapse/issues/6965))
+      - Validate the `alt_aliases` property of canonical alias
+        events.
+        ([\#6971](https://github.com/matrix-org/synapse/issues/6971))
+      - Users with a power level sufficient to modify the canonical
+        alias of a room can now delete room aliases.
+        ([\#6986](https://github.com/matrix-org/synapse/issues/6986))
+      - Implement updated authorization rules and redaction rules
+        for aliases events, from
+        [MSC2261](https://github.com/matrix-org/matrix-doc/pull/2261)
+        and
+        [MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432).
+        ([\#7037](https://github.com/matrix-org/synapse/issues/7037))
+      - Stop sending m.room.aliases events during room creation and
+        upgrade.
+        ([\#6941](https://github.com/matrix-org/synapse/issues/6941))
+      - Synapse no longer uses room alias events to calculate room
+        names for push notifications.
+        ([\#6966](https://github.com/matrix-org/synapse/issues/6966))
+      - The room list endpoint no longer returns a list of aliases.
+        ([\#6970](https://github.com/matrix-org/synapse/issues/6970))
+      - Remove special handling of aliases events from
+        [MSC2260](https://github.com/matrix-org/matrix-doc/pull/2260)
+        added in v1.10.0rc1.
+        ([\#7034](https://github.com/matrix-org/synapse/issues/7034))
+    - Expose the `synctl`, `hash_password` and `generate_config`
+      commands in the snapcraft package. Contributed by @devec0.
+      ([\#6315](https://github.com/matrix-org/synapse/issues/6315))
+    - Check that server_name is correctly set before running
+      database updates.
+      ([\#6982](https://github.com/matrix-org/synapse/issues/6982))
+    - Break down monthly active users by `appservice_id` and emit
+      via Prometheus.
+      ([\#7030](https://github.com/matrix-org/synapse/issues/7030))
+    - Render a configurable and comprehensible error page if
+      something goes wrong during the SAML2 authentication process.
+      ([\#7058](https://github.com/matrix-org/synapse/issues/7058),
+      [\#7067](https://github.com/matrix-org/synapse/issues/7067))
+    - Add an optional parameter to control whether other sessions
+      are logged out when a user's password is modified.
+      ([\#7085](https://github.com/matrix-org/synapse/issues/7085))
+    - Add prometheus metrics for the number of active pushers.
+      ([\#7103](https://github.com/matrix-org/synapse/issues/7103),
+      [\#7106](https://github.com/matrix-org/synapse/issues/7106))
+    - Improve performance when making HTTPS requests to sygnal,
+      sydent, etc, by sharing the SSL context object between
+      connections.
+      ([\#7094](https://github.com/matrix-org/synapse/issues/7094))
+  - Bugfixes
+    - When a user's profile is updated via the admin API, also
+      generate a displayname/avatar update for that user in each
+      room.
+      ([\#6572](https://github.com/matrix-org/synapse/issues/6572))
+    - Fix a couple of bugs in email configuration handling.
+      ([\#6962](https://github.com/matrix-org/synapse/issues/6962))
+    - Fix an issue affecting worker-based deployments where
+      replication would stop working, necessitating a full restart,
+      after joining a large room.
+      ([\#6967](https://github.com/matrix-org/synapse/issues/6967))
+    - Fix `duplicate key` error which was logged when rejoining a
+      room over federation.
+      ([\#6968](https://github.com/matrix-org/synapse/issues/6968))
+    - Prevent user from setting 'deactivated' to anything other
+      than a bool on the v2 PUT /users Admin API.
+      ([\#6990](https://github.com/matrix-org/synapse/issues/6990))
+    - Fix py35-old CI by using native tox package.
+      ([\#7018](https://github.com/matrix-org/synapse/issues/7018))
+    - Fix a bug causing `org.matrix.dummy_event` to be included in
+      responses from `/sync`.
+      ([\#7035](https://github.com/matrix-org/synapse/issues/7035))
+    - Fix a bug that renders UTF-8 text files incorrectly when
+      loaded from media. Contributed by @TheStranjer.
+      ([\#7044](https://github.com/matrix-org/synapse/issues/7044))
+    - Fix a bug that would cause Synapse to respond with an error
+      about event visibility if a client tried to request the state
+      of a room at a given token.
+      ([\#7066](https://github.com/matrix-org/synapse/issues/7066))
+    - Repair a data-corruption issue which was introduced in
+      Synapse 1.10, and fixed in Synapse 1.11, and which could
+      cause `/sync` to return with 404 errors about missing events
+      and unknown rooms.
+      ([\#7070](https://github.com/matrix-org/synapse/issues/7070))
+    - Fix a bug causing account validity renewal emails to be sent
+      even if the feature is turned off in some cases.
+      ([\#7074](https://github.com/matrix-org/synapse/issues/7074))
+  - Improved Documentation
+    - Updated CentOS8 install instructions. Contributed by Richard
+      Kellner.
+      ([\#6925](https://github.com/matrix-org/synapse/issues/6925))
+    - Fix `POSTGRES_INITDB_ARGS` in the
+      `contrib/docker/docker-compose.yml` example docker-compose
+      configuration.
+      ([\#6984](https://github.com/matrix-org/synapse/issues/6984))
+    - Change date in [INSTALL.md](./INSTALL.md#tls-certificates)
+      for last date of getting TLS certificates to November 2019.
+      ([\#7015](https://github.com/matrix-org/synapse/issues/7015))
+    - Document that the fallback auth endpoints must be routed to
+      the same worker node as the register endpoints.
+      ([\#7048](https://github.com/matrix-org/synapse/issues/7048))
+  - Deprecations and Removals
+    - Remove the unused query_auth federation endpoint per
+      [MSC2451](https://github.com/matrix-org/matrix-doc/pull/2451).
+      ([\#7026](https://github.com/matrix-org/synapse/issues/7026))
+  - Internal Changes
+    - Add type hints to `logging/context.py`.
+      ([\#6309](https://github.com/matrix-org/synapse/issues/6309))
+    - Add some clarifications to `README.md` in the database schema
+      directory.
+      ([\#6615](https://github.com/matrix-org/synapse/issues/6615))
+    - Refactoring work in preparation for changing the event
+      redaction algorithm.
+      ([\#6874](https://github.com/matrix-org/synapse/issues/6874),
+      [\#6875](https://github.com/matrix-org/synapse/issues/6875),
+      [\#6983](https://github.com/matrix-org/synapse/issues/6983),
+      [\#7003](https://github.com/matrix-org/synapse/issues/7003))
+    - Improve performance of v2 state resolution for large rooms.
+      ([\#6952](https://github.com/matrix-org/synapse/issues/6952),
+      [\#7095](https://github.com/matrix-org/synapse/issues/7095))
+    - Reduce time spent doing GC, by freezing objects on startup.
+      ([\#6953](https://github.com/matrix-org/synapse/issues/6953))
+    - Minor perfermance fixes to `get_auth_chain_ids`.
+      ([\#6954](https://github.com/matrix-org/synapse/issues/6954))
+    - Don't record remote cross-signing keys in the `devices`
+      table.
+      ([\#6956](https://github.com/matrix-org/synapse/issues/6956))
+    - Use flake8-comprehensions to enforce good hygiene of
+      list/set/dict comprehensions.
+      ([\#6957](https://github.com/matrix-org/synapse/issues/6957))
+    - Merge worker apps together.
+      ([\#6964](https://github.com/matrix-org/synapse/issues/6964),
+      [\#7002](https://github.com/matrix-org/synapse/issues/7002),
+      [\#7055](https://github.com/matrix-org/synapse/issues/7055),
+      [\#7104](https://github.com/matrix-org/synapse/issues/7104))
+    - Remove redundant `store_room` call from
+      `FederationHandler._process_received_pdu`.
+      ([\#6979](https://github.com/matrix-org/synapse/issues/6979))
+    - Update warning for incorrect database collation/ctype to
+      include link to documentation.
+      ([\#6985](https://github.com/matrix-org/synapse/issues/6985))
+    - Add some type annotations to the database storage classes.
+      ([\#6987](https://github.com/matrix-org/synapse/issues/6987))
+    - Port `synapse.handlers.presence` to async/await.
+      ([\#6991](https://github.com/matrix-org/synapse/issues/6991),
+      [\#7019](https://github.com/matrix-org/synapse/issues/7019))
+    - Add some type annotations to the federation base & client
+      classes.
+      ([\#6995](https://github.com/matrix-org/synapse/issues/6995))
+    - Port `synapse.rest.keys` to async/await.
+      ([\#7020](https://github.com/matrix-org/synapse/issues/7020))
+    - Add a type check to `is_verified` when processing room keys.
+      ([\#7045](https://github.com/matrix-org/synapse/issues/7045))
+    - Add type annotations and comments to the auth handler.
+      ([\#7063](https://github.com/matrix-org/synapse/issues/7063))
+
 -------------------------------------------------------------------
 Tue Mar  3 21:43:02 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
 
diff --git a/matrix-synapse.obsinfo b/matrix-synapse.obsinfo
index 11f90d3..dd2c18d 100644
--- a/matrix-synapse.obsinfo
+++ b/matrix-synapse.obsinfo
@@ -1,5 +1,5 @@
 name: matrix-synapse
-version: 1.11.1
-mtime: 1583247703
-commit: 6b0ef34706e32121ff6f802d62b3eb8545785afe
+version: 1.17.0
+mtime: 1594632036
+commit: 29df3d0e9f455c780d8489cc9bc293cb6fa6bc1e
 
diff --git a/matrix-synapse.spec b/matrix-synapse.spec
index ad42776..4854e74 100644
--- a/matrix-synapse.spec
+++ b/matrix-synapse.spec
@@ -46,7 +46,7 @@
 %define         modname synapse
 %define         pkgname matrix-synapse
 Name:           %{pkgname}
-Version:        1.11.1
+Version:        1.17.0
 Release:        0
 Summary:        Matrix protocol reference homeserver
 License:        Apache-2.0
@@ -77,102 +77,102 @@ Requires:       %{python_flavor} >= 3.5
 %endif
 # NOTE: Keep this is in the same order as synapse/python_dependencie.py.
 BuildRequires:  python3-Pillow >= 4.3.0
-Requires:       python3-Pillow >= 4.3.0
+%requires_eq    python3-Pillow
 BuildRequires:  python3-PyNaCl >= 1.2.1
-Requires:       python3-PyNaCl >= 1.2.1
+%requires_eq    python3-PyNaCl
 BuildRequires:  python3-PyYAML >= 3.11
-Requires:       python3-PyYAML >= 3.11
-BuildRequires:  python3-Twisted >= 18.9.0
-Requires:       python3-Twisted >= 18.9.0
+%requires_eq    python3-PyYAML
+BuildRequires:  python3-Twisted >= 20.3.0
+%requires_eq    python3-Twisted
 BuildRequires:  python3-attrs >= 17.4.0
-Requires:       python3-attrs >= 17.4.0
+%requires_eq    python3-attrs
 BuildRequires:  python3-bcrypt >= 3.1.0
-Requires:       python3-bcrypt >= 3.1.0
+%requires_eq    python3-bcrypt
 BuildRequires:  python3-bleach >= 1.4.3
-Requires:       python3-bleach >= 1.4.3
+%requires_eq    python3-bleach
 BuildRequires:  python3-canonicaljson >= 1.1.3
-Requires:       python3-canonicaljson >= 1.1.3
+%requires_eq    python3-canonicaljson
 BuildRequires:  python3-daemonize >= 2.3.1
-Requires:       python3-daemonize >= 2.3.1
+%requires_eq    python3-daemonize
 BuildRequires:  python3-frozendict >= 1
-Requires:       python3-frozendict >= 1
+%requires_eq    python3-frozendict
 BuildRequires:  python3-idna >= 2.5
-Requires:       python3-idna >= 2.5
+%requires_eq    python3-idna
 BuildRequires:  python3-jsonschema >= 2.5.1
-Requires:       python3-jsonschema >= 2.5.1
+%requires_eq    python3-jsonschema
 BuildRequires:  python3-msgpack >= 0.5.2
-Requires:       python3-msgpack >= 0.5.2
+%requires_eq    python3-msgpack
 BuildRequires:  python3-netaddr >= 0.7.18
-Requires:       python3-netaddr >= 0.7.18
+%requires_eq    python3-netaddr
 BuildRequires:  python3-phonenumbers >= 8.2.0
-Requires:       python3-phonenumbers >= 8.2.0
-BuildRequires:  python3-prometheus_client >= 0.4.0
-Requires:       python3-prometheus_client >= 0.4.0
+%requires_eq    python3-phonenumbers
+BuildRequires:  (python3-prometheus_client >= 0.4.0 with python3-prometheus_client < 0.9.0)
+%requires_eq    python3-prometheus_client
 BuildRequires:  python3-psutil >= 2.0.0
-Requires:       python3-psutil >= 2.0.0
+%requires_eq    python3-psutil
 BuildRequires:  python3-pyOpenSSL >= 16.0.0
-Requires:       python3-pyOpenSSL >= 16.0.0
+%requires_eq    python3-pyOpenSSL
 BuildRequires:  python3-pyasn1 >= 0.1.9
-Requires:       python3-pyasn1 >= 0.1.9
+%requires_eq    python3-pyasn1
 BuildRequires:  python3-pyasn1-modules >= 0.0.7
-Requires:       python3-pyasn1-modules >= 0.0.7
+%requires_eq    python3-pyasn1-modules
 BuildRequires:  python3-pymacaroons >= 0.13.0
-Requires:       python3-pymacaroons >= 0.13.0
+%requires_eq    python3-pymacaroons
 BuildRequires:  python3-service_identity >= 18.1.0
-Requires:       python3-service_identity >= 18.1.0
+%requires_eq    python3-service_identity
 BuildRequires:  python3-signedjson >= 1.1.0
-Requires:       python3-signedjson >= 1.1.0
+%requires_eq    python3-signedjson
 BuildRequires:  python3-six >= 1.10
-Requires:       python3-six >= 1.10
+%requires_eq    python3-six
 BuildRequires:  python3-sortedcontainers >= 1.4.4
-Requires:       python3-sortedcontainers >= 1.4.4
+%requires_eq    python3-sortedcontainers
 BuildRequires:  python3-systemd  >= 231
-Requires:       python3-systemd  >= 231
+%requires_eq    python3-systemd
 BuildRequires:  python3-typing_extensions >= 3.7.4
-Requires:       python3-typing_extensions >= 3.7.4
+%requires_eq    python3-typing_extensions
 BuildRequires:  python3-treq >= 15.1
-Requires:       python3-treq >= 15.1
+%requires_eq    python3-treq
 BuildRequires:  python3-unpaddedbase64 >= 1.1.0
-Requires:       python3-unpaddedbase64 >= 1.1.0
+%requires_eq    python3-unpaddedbase64
 # Specify all CONDITIONAL_REQUIREMENTS (we Require them to avoid no-recommends
 # breaking very commonly-used bits of matrix-synapse such as postgresql).
 %if %{with email_notifs}
 BuildRequires:  python3-Jinja2 >= 2.9
-Requires:       python3-Jinja2 >= 2.9
+%requires_eq    python3-Jinja2
 %endif
 %if %{with ldap}
 BuildRequires:  python3-matrix-synapse-ldap3 >= 0.1
-Requires:       python3-matrix-synapse-ldap3 >= 0.1
+%requires_eq    python3-matrix-synapse-ldap3
 %endif
 %if %{with postgres}
 BuildRequires:  python3-psycopg2 >= 2.7
-Requires:       python3-psycopg2 >= 2.7
+%requires_eq    python3-psycopg2
 %endif
 %if %{with acme}
 BuildRequires:  python3-txacme >= 0.9.2
-Requires:       python3-txacme >= 0.9.2
+%requires_eq    python3-txacme
 %endif
 %if %{with saml}
 BuildRequires:  python3-pysaml2 >= 4.5.0
-Requires:       python3-pysaml2 >= 4.5.0
+%requires_eq    python3-pysaml2
 %endif
 %if %{with url_preview}
 BuildRequires:  python3-lxml >= 3.5.0
-Requires:       python3-lxml >= 3.5.0
+%requires_eq    python3-lxml
 %endif
 %if %{with sentry}
 BuildRequires:  python3-sentry-sdk >= 0.7.2
-Requires:       python3-sentry-sdk >= 0.7.2
+%requires_eq    python3-sentry-sdk
 %endif
 %if %{with jwt}
 BuildRequires:  python3-PyJWT >= 1.6.4
-Requires:       python3-PyJWT >= 1.6.4
+%requires_eq    python3-PyJWT
 %endif
 %if %{with opentracing}
 BuildRequires:  python3-jaeger-client >= 4.0.0
-Requires:       python3-jaeger-client >= 4.0.0
+%requires_eq    python3-jaeger-client
 BuildRequires:  python3-opentracing   >= 2.2.0
-Requires:       python3-opentracing   >= 2.2.0
+%requires_eq    python3-opentracing
 %endif
 BuildArch:      noarch
 # We only provide/obsolete python2 to ensure that users upgrade.