From a5a5e5b5e6336db7dda66416fa4227cd9c7590efd0e3b0d44ac752e7fdecdd35 Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Wed, 18 Dec 2019 12:16:20 +0000 Subject: [PATCH] Accepting request 757734 from home:cyphar:matrix - Update to 1.7.1. This update fixes several majar security issues. Users are very strongly recommended to update as soon as possible. * Fix a bug which could cause room events to be incorrectly authorized using events from a different room. * Fix a bug causing responses to the /context client endpoint to not use the pruned version of the event. * Fix a cause of state resets in room versions 2 onwards. * Fix a bug which could cause the federation server to incorrectly return errors when handling certain obscure event graphs. The full changelog is included in /usr/share/doc/packages/matrix-synapse/CHANGES.md. OBS-URL: https://build.opensuse.org/request/show/757734 OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=99 --- _service | 2 +- matrix-synapse-1.7.0.obscpio | 3 --- matrix-synapse-1.7.1.obscpio | 3 +++ matrix-synapse-test.spec | 2 +- matrix-synapse.changes | 19 +++++++++++++++++++ matrix-synapse.obsinfo | 6 +++--- matrix-synapse.spec | 2 +- 7 files changed, 28 insertions(+), 9 deletions(-) delete mode 100644 matrix-synapse-1.7.0.obscpio create mode 100644 matrix-synapse-1.7.1.obscpio diff --git a/_service b/_service index 9fba272..4c55c3b 100644 --- a/_service +++ b/_service @@ -5,7 +5,7 @@ https://github.com/matrix-org/synapse.git git v(.*) - v1.7.0 + v1.7.1 diff --git a/matrix-synapse-1.7.0.obscpio b/matrix-synapse-1.7.0.obscpio deleted file mode 100644 index 12b9db4..0000000 --- a/matrix-synapse-1.7.0.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:71087e7dac3719092d9853e70861212bf59eda8f5d1217db9e96a521f7cae01a -size 26241037 diff --git a/matrix-synapse-1.7.1.obscpio b/matrix-synapse-1.7.1.obscpio new file mode 100644 index 0000000..d4a5709 --- /dev/null +++ b/matrix-synapse-1.7.1.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d4aafd936edc33a3e6bf13daa55e16ffab396c9980887afc97fb72add41510eb +size 26247693 diff --git a/matrix-synapse-test.spec b/matrix-synapse-test.spec index fe65e3f..0a06509 100644 --- a/matrix-synapse-test.spec +++ b/matrix-synapse-test.spec @@ -32,7 +32,7 @@ %define pkgname matrix-synapse Name: %{pkgname}-test -Version: 1.7.0 +Version: 1.7.1 Release: 0 Summary: Test package for %{pkgname} License: Apache-2.0 diff --git a/matrix-synapse.changes b/matrix-synapse.changes index 0f92034..14aca55 100644 --- a/matrix-synapse.changes +++ b/matrix-synapse.changes @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Wed Dec 18 12:02:59 UTC 2019 - Aleksa Sarai + +- Update to 1.7.1. + + This update fixes several majar security issues. Users are very strongly + recommended to update as soon as possible. + + * Fix a bug which could cause room events to be incorrectly authorized using + events from a different room. + * Fix a bug causing responses to the /context client endpoint to not use the + pruned version of the event. + * Fix a cause of state resets in room versions 2 onwards. + * Fix a bug which could cause the federation server to incorrectly return + errors when handling certain obscure event graphs. + + The full changelog is included in + /usr/share/doc/packages/matrix-synapse/CHANGES.md. + ------------------------------------------------------------------- Fri Dec 13 13:23:59 UTC 2019 - Aleksa Sarai diff --git a/matrix-synapse.obsinfo b/matrix-synapse.obsinfo index ec37ad7..dc6a9ed 100644 --- a/matrix-synapse.obsinfo +++ b/matrix-synapse.obsinfo @@ -1,5 +1,5 @@ name: matrix-synapse -version: 1.7.0 -mtime: 1576234349 -commit: ba57a456449bdf32cdc3b4b7418aa5022d70f5e5 +version: 1.7.1 +mtime: 1576662003 +commit: e156c86a7f3d616bcb8fd80d5d319fd9a3d73cb6 diff --git a/matrix-synapse.spec b/matrix-synapse.spec index 0e68faa..4c2717c 100644 --- a/matrix-synapse.spec +++ b/matrix-synapse.spec @@ -44,7 +44,7 @@ %define modname synapse %define pkgname matrix-synapse Name: %{pkgname} -Version: 1.7.0 +Version: 1.7.1 Release: 0 Summary: Matrix protocol reference homeserver License: Apache-2.0