Accepting request 790969 from home:darix:apps

- Update to 1.12.1

OBS-URL: https://build.opensuse.org/request/show/790969
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=121
This commit is contained in:
Marcus Rückert 2020-04-02 16:41:09 +00:00 committed by Git OBS Bridge
parent 0fa46ec216
commit c61ca25981
7 changed files with 250 additions and 49 deletions

View File

@ -4,7 +4,7 @@
<param name="versionformat">@PARENT_TAG@</param>
<param name="url">https://github.com/matrix-org/synapse.git</param>
<param name="scm">git</param>
<param name="revision">v1.11.1</param>
<param name="revision">v1.12.1</param>
<param name="versionrewrite-pattern">v(.*)</param>
<!--
<param name="versionrewrite-pattern">v([\.\d]+)(rc.*)</param>

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7ac262ab6ee74268659529697ae41be6fb64efae2a5171060718bace41ef1653
size 26549261

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:6625de2a9ef0948b6804580fd427b276339dbef64a78e745ff1e90bec0df2ad1
size 26577933

View File

@ -32,7 +32,7 @@
%define pkgname matrix-synapse
Name: %{pkgname}-test
Version: 1.11.1
Version: 1.12.1
Release: 0
Summary: Test package for %{pkgname}
License: Apache-2.0

View File

@ -1,3 +1,204 @@
-------------------------------------------------------------------
Thu Apr 2 16:28:51 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- Update to 1.12.1
- Fix starting workers when federation sending not split out.
(#7133). Introduced in v1.12.0.
- Avoid importing sqlite3 when using the postgres backend.
Contributed by David Vo. (#7155). Introduced in v1.12.0rc1.
- Fix a bug which could cause outbound federation traffic to stop
working if a client uploaded an incorrect e2e device signature.
(#7177). Introduced in v1.11.0.
-------------------------------------------------------------------
Tue Mar 24 15:31:47 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- use %requires_eq for runtime dependencies to make sure we always
use the versions we built with. we ran into cases where the
distro package was new enough according to the setup dependencies
but those were not up2date with the actual code.
-------------------------------------------------------------------
Mon Mar 23 14:36:36 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- Update to 1.12.0
Synapse may be vulnerable to request-smuggling attacks when it is
used with a reverse-proxy. The vulnerabilties are fixed in
Twisted 20.3.0, and are described in
[CVE-2020-10108](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10108)
and
[CVE-2020-10109](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10109).
For a good introduction to this class of request-smuggling
attacks, see
https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn.
We are not aware of these vulnerabilities being exploited in the
wild, and do not believe that they are exploitable with current
versions of any reverse proxies. Nevertheless, we recommend that
all Synapse administrators ensure that they have the latest
versions of the Twisted library to ensure that their installation
remains secure.
- Features
- Changes related to room alias management
([MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432)):
- Publishing/removing a room from the room directory now
requires the user to have a power level capable of
modifying the canonical alias, instead of the room aliases.
([\#6965](https://github.com/matrix-org/synapse/issues/6965))
- Validate the `alt_aliases` property of canonical alias
events.
([\#6971](https://github.com/matrix-org/synapse/issues/6971))
- Users with a power level sufficient to modify the canonical
alias of a room can now delete room aliases.
([\#6986](https://github.com/matrix-org/synapse/issues/6986))
- Implement updated authorization rules and redaction rules
for aliases events, from
[MSC2261](https://github.com/matrix-org/matrix-doc/pull/2261)
and
[MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432).
([\#7037](https://github.com/matrix-org/synapse/issues/7037))
- Stop sending m.room.aliases events during room creation and
upgrade.
([\#6941](https://github.com/matrix-org/synapse/issues/6941))
- Synapse no longer uses room alias events to calculate room
names for push notifications.
([\#6966](https://github.com/matrix-org/synapse/issues/6966))
- The room list endpoint no longer returns a list of aliases.
([\#6970](https://github.com/matrix-org/synapse/issues/6970))
- Remove special handling of aliases events from
[MSC2260](https://github.com/matrix-org/matrix-doc/pull/2260)
added in v1.10.0rc1.
([\#7034](https://github.com/matrix-org/synapse/issues/7034))
- Expose the `synctl`, `hash_password` and `generate_config`
commands in the snapcraft package. Contributed by @devec0.
([\#6315](https://github.com/matrix-org/synapse/issues/6315))
- Check that server_name is correctly set before running
database updates.
([\#6982](https://github.com/matrix-org/synapse/issues/6982))
- Break down monthly active users by `appservice_id` and emit
via Prometheus.
([\#7030](https://github.com/matrix-org/synapse/issues/7030))
- Render a configurable and comprehensible error page if
something goes wrong during the SAML2 authentication process.
([\#7058](https://github.com/matrix-org/synapse/issues/7058),
[\#7067](https://github.com/matrix-org/synapse/issues/7067))
- Add an optional parameter to control whether other sessions
are logged out when a user's password is modified.
([\#7085](https://github.com/matrix-org/synapse/issues/7085))
- Add prometheus metrics for the number of active pushers.
([\#7103](https://github.com/matrix-org/synapse/issues/7103),
[\#7106](https://github.com/matrix-org/synapse/issues/7106))
- Improve performance when making HTTPS requests to sygnal,
sydent, etc, by sharing the SSL context object between
connections.
([\#7094](https://github.com/matrix-org/synapse/issues/7094))
- Bugfixes
- When a user's profile is updated via the admin API, also
generate a displayname/avatar update for that user in each
room.
([\#6572](https://github.com/matrix-org/synapse/issues/6572))
- Fix a couple of bugs in email configuration handling.
([\#6962](https://github.com/matrix-org/synapse/issues/6962))
- Fix an issue affecting worker-based deployments where
replication would stop working, necessitating a full restart,
after joining a large room.
([\#6967](https://github.com/matrix-org/synapse/issues/6967))
- Fix `duplicate key` error which was logged when rejoining a
room over federation.
([\#6968](https://github.com/matrix-org/synapse/issues/6968))
- Prevent user from setting 'deactivated' to anything other
than a bool on the v2 PUT /users Admin API.
([\#6990](https://github.com/matrix-org/synapse/issues/6990))
- Fix py35-old CI by using native tox package.
([\#7018](https://github.com/matrix-org/synapse/issues/7018))
- Fix a bug causing `org.matrix.dummy_event` to be included in
responses from `/sync`.
([\#7035](https://github.com/matrix-org/synapse/issues/7035))
- Fix a bug that renders UTF-8 text files incorrectly when
loaded from media. Contributed by @TheStranjer.
([\#7044](https://github.com/matrix-org/synapse/issues/7044))
- Fix a bug that would cause Synapse to respond with an error
about event visibility if a client tried to request the state
of a room at a given token.
([\#7066](https://github.com/matrix-org/synapse/issues/7066))
- Repair a data-corruption issue which was introduced in
Synapse 1.10, and fixed in Synapse 1.11, and which could
cause `/sync` to return with 404 errors about missing events
and unknown rooms.
([\#7070](https://github.com/matrix-org/synapse/issues/7070))
- Fix a bug causing account validity renewal emails to be sent
even if the feature is turned off in some cases.
([\#7074](https://github.com/matrix-org/synapse/issues/7074))
- Improved Documentation
- Updated CentOS8 install instructions. Contributed by Richard
Kellner.
([\#6925](https://github.com/matrix-org/synapse/issues/6925))
- Fix `POSTGRES_INITDB_ARGS` in the
`contrib/docker/docker-compose.yml` example docker-compose
configuration.
([\#6984](https://github.com/matrix-org/synapse/issues/6984))
- Change date in [INSTALL.md](./INSTALL.md#tls-certificates)
for last date of getting TLS certificates to November 2019.
([\#7015](https://github.com/matrix-org/synapse/issues/7015))
- Document that the fallback auth endpoints must be routed to
the same worker node as the register endpoints.
([\#7048](https://github.com/matrix-org/synapse/issues/7048))
- Deprecations and Removals
- Remove the unused query_auth federation endpoint per
[MSC2451](https://github.com/matrix-org/matrix-doc/pull/2451).
([\#7026](https://github.com/matrix-org/synapse/issues/7026))
- Internal Changes
- Add type hints to `logging/context.py`.
([\#6309](https://github.com/matrix-org/synapse/issues/6309))
- Add some clarifications to `README.md` in the database schema
directory.
([\#6615](https://github.com/matrix-org/synapse/issues/6615))
- Refactoring work in preparation for changing the event
redaction algorithm.
([\#6874](https://github.com/matrix-org/synapse/issues/6874),
[\#6875](https://github.com/matrix-org/synapse/issues/6875),
[\#6983](https://github.com/matrix-org/synapse/issues/6983),
[\#7003](https://github.com/matrix-org/synapse/issues/7003))
- Improve performance of v2 state resolution for large rooms.
([\#6952](https://github.com/matrix-org/synapse/issues/6952),
[\#7095](https://github.com/matrix-org/synapse/issues/7095))
- Reduce time spent doing GC, by freezing objects on startup.
([\#6953](https://github.com/matrix-org/synapse/issues/6953))
- Minor perfermance fixes to `get_auth_chain_ids`.
([\#6954](https://github.com/matrix-org/synapse/issues/6954))
- Don't record remote cross-signing keys in the `devices`
table.
([\#6956](https://github.com/matrix-org/synapse/issues/6956))
- Use flake8-comprehensions to enforce good hygiene of
list/set/dict comprehensions.
([\#6957](https://github.com/matrix-org/synapse/issues/6957))
- Merge worker apps together.
([\#6964](https://github.com/matrix-org/synapse/issues/6964),
[\#7002](https://github.com/matrix-org/synapse/issues/7002),
[\#7055](https://github.com/matrix-org/synapse/issues/7055),
[\#7104](https://github.com/matrix-org/synapse/issues/7104))
- Remove redundant `store_room` call from
`FederationHandler._process_received_pdu`.
([\#6979](https://github.com/matrix-org/synapse/issues/6979))
- Update warning for incorrect database collation/ctype to
include link to documentation.
([\#6985](https://github.com/matrix-org/synapse/issues/6985))
- Add some type annotations to the database storage classes.
([\#6987](https://github.com/matrix-org/synapse/issues/6987))
- Port `synapse.handlers.presence` to async/await.
([\#6991](https://github.com/matrix-org/synapse/issues/6991),
[\#7019](https://github.com/matrix-org/synapse/issues/7019))
- Add some type annotations to the federation base & client
classes.
([\#6995](https://github.com/matrix-org/synapse/issues/6995))
- Port `synapse.rest.keys` to async/await.
([\#7020](https://github.com/matrix-org/synapse/issues/7020))
- Add a type check to `is_verified` when processing room keys.
([\#7045](https://github.com/matrix-org/synapse/issues/7045))
- Add type annotations and comments to the auth handler.
([\#7063](https://github.com/matrix-org/synapse/issues/7063))
-------------------------------------------------------------------
Tue Mar 3 21:43:02 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>

View File

@ -1,5 +1,5 @@
name: matrix-synapse
version: 1.11.1
mtime: 1583247703
commit: 6b0ef34706e32121ff6f802d62b3eb8545785afe
version: 1.12.1
mtime: 1585823536
commit: 529462b5c044f7f7491fd41ab7d0682d01a6236b

View File

@ -46,7 +46,7 @@
%define modname synapse
%define pkgname matrix-synapse
Name: %{pkgname}
Version: 1.11.1
Version: 1.12.1
Release: 0
Summary: Matrix protocol reference homeserver
License: Apache-2.0
@ -77,102 +77,102 @@ Requires: %{python_flavor} >= 3.5
%endif
# NOTE: Keep this is in the same order as synapse/python_dependencie.py.
BuildRequires: python3-Pillow >= 4.3.0
Requires: python3-Pillow >= 4.3.0
%requires_eq python3-Pillow
BuildRequires: python3-PyNaCl >= 1.2.1
Requires: python3-PyNaCl >= 1.2.1
%requires_eq python3-PyNaCl
BuildRequires: python3-PyYAML >= 3.11
Requires: python3-PyYAML >= 3.11
BuildRequires: python3-Twisted >= 18.9.0
Requires: python3-Twisted >= 18.9.0
%requires_eq python3-PyYAML
BuildRequires: python3-Twisted >= 20.3.0
%requires_eq python3-Twisted
BuildRequires: python3-attrs >= 17.4.0
Requires: python3-attrs >= 17.4.0
%requires_eq python3-attrs
BuildRequires: python3-bcrypt >= 3.1.0
Requires: python3-bcrypt >= 3.1.0
%requires_eq python3-bcrypt
BuildRequires: python3-bleach >= 1.4.3
Requires: python3-bleach >= 1.4.3
%requires_eq python3-bleach
BuildRequires: python3-canonicaljson >= 1.1.3
Requires: python3-canonicaljson >= 1.1.3
%requires_eq python3-canonicaljson
BuildRequires: python3-daemonize >= 2.3.1
Requires: python3-daemonize >= 2.3.1
%requires_eq python3-daemonize
BuildRequires: python3-frozendict >= 1
Requires: python3-frozendict >= 1
%requires_eq python3-frozendict
BuildRequires: python3-idna >= 2.5
Requires: python3-idna >= 2.5
%requires_eq python3-idna
BuildRequires: python3-jsonschema >= 2.5.1
Requires: python3-jsonschema >= 2.5.1
%requires_eq python3-jsonschema
BuildRequires: python3-msgpack >= 0.5.2
Requires: python3-msgpack >= 0.5.2
%requires_eq python3-msgpack
BuildRequires: python3-netaddr >= 0.7.18
Requires: python3-netaddr >= 0.7.18
%requires_eq python3-netaddr
BuildRequires: python3-phonenumbers >= 8.2.0
Requires: python3-phonenumbers >= 8.2.0
%requires_eq python3-phonenumbers
BuildRequires: python3-prometheus_client >= 0.4.0
Requires: python3-prometheus_client >= 0.4.0
%requires_eq python3-prometheus_client
BuildRequires: python3-psutil >= 2.0.0
Requires: python3-psutil >= 2.0.0
%requires_eq python3-psutil
BuildRequires: python3-pyOpenSSL >= 16.0.0
Requires: python3-pyOpenSSL >= 16.0.0
%requires_eq python3-pyOpenSSL
BuildRequires: python3-pyasn1 >= 0.1.9
Requires: python3-pyasn1 >= 0.1.9
%requires_eq python3-pyasn1
BuildRequires: python3-pyasn1-modules >= 0.0.7
Requires: python3-pyasn1-modules >= 0.0.7
%requires_eq python3-pyasn1-modules
BuildRequires: python3-pymacaroons >= 0.13.0
Requires: python3-pymacaroons >= 0.13.0
%requires_eq python3-pymacaroons
BuildRequires: python3-service_identity >= 18.1.0
Requires: python3-service_identity >= 18.1.0
%requires_eq python3-service_identity
BuildRequires: python3-signedjson >= 1.1.0
Requires: python3-signedjson >= 1.1.0
%requires_eq python3-signedjson
BuildRequires: python3-six >= 1.10
Requires: python3-six >= 1.10
%requires_eq python3-six
BuildRequires: python3-sortedcontainers >= 1.4.4
Requires: python3-sortedcontainers >= 1.4.4
%requires_eq python3-sortedcontainers
BuildRequires: python3-systemd >= 231
Requires: python3-systemd >= 231
%requires_eq python3-systemd
BuildRequires: python3-typing_extensions >= 3.7.4
Requires: python3-typing_extensions >= 3.7.4
%requires_eq python3-typing_extensions
BuildRequires: python3-treq >= 15.1
Requires: python3-treq >= 15.1
%requires_eq python3-treq
BuildRequires: python3-unpaddedbase64 >= 1.1.0
Requires: python3-unpaddedbase64 >= 1.1.0
%requires_eq python3-unpaddedbase64
# Specify all CONDITIONAL_REQUIREMENTS (we Require them to avoid no-recommends
# breaking very commonly-used bits of matrix-synapse such as postgresql).
%if %{with email_notifs}
BuildRequires: python3-Jinja2 >= 2.9
Requires: python3-Jinja2 >= 2.9
%requires_eq python3-Jinja2
%endif
%if %{with ldap}
BuildRequires: python3-matrix-synapse-ldap3 >= 0.1
Requires: python3-matrix-synapse-ldap3 >= 0.1
%requires_eq python3-matrix-synapse-ldap3
%endif
%if %{with postgres}
BuildRequires: python3-psycopg2 >= 2.7
Requires: python3-psycopg2 >= 2.7
%requires_eq python3-psycopg2
%endif
%if %{with acme}
BuildRequires: python3-txacme >= 0.9.2
Requires: python3-txacme >= 0.9.2
%requires_eq python3-txacme
%endif
%if %{with saml}
BuildRequires: python3-pysaml2 >= 4.5.0
Requires: python3-pysaml2 >= 4.5.0
%requires_eq python3-pysaml2
%endif
%if %{with url_preview}
BuildRequires: python3-lxml >= 3.5.0
Requires: python3-lxml >= 3.5.0
%requires_eq python3-lxml
%endif
%if %{with sentry}
BuildRequires: python3-sentry-sdk >= 0.7.2
Requires: python3-sentry-sdk >= 0.7.2
%requires_eq python3-sentry-sdk
%endif
%if %{with jwt}
BuildRequires: python3-PyJWT >= 1.6.4
Requires: python3-PyJWT >= 1.6.4
%requires_eq python3-PyJWT
%endif
%if %{with opentracing}
BuildRequires: python3-jaeger-client >= 4.0.0
Requires: python3-jaeger-client >= 4.0.0
%requires_eq python3-jaeger-client
BuildRequires: python3-opentracing >= 2.2.0
Requires: python3-opentracing >= 2.2.0
%requires_eq python3-opentracing
%endif
BuildArch: noarch
# We only provide/obsolete python2 to ensure that users upgrade.