From c61ca259815a4c0d7c91c8fa9e789fdfbc23fb3aefd2bcc6237d99fa3a90a842 Mon Sep 17 00:00:00 2001
From: Marcus Rueckert <mrueckert@suse.com>
Date: Thu, 2 Apr 2020 16:41:09 +0000
Subject: [PATCH] Accepting request 790969 from home:darix:apps

- Update to 1.12.1

OBS-URL: https://build.opensuse.org/request/show/790969
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=121
---
 _service                      |   2 +-
 matrix-synapse-1.11.1.obscpio |   3 -
 matrix-synapse-1.12.1.obscpio |   3 +
 matrix-synapse-test.spec      |   2 +-
 matrix-synapse.changes        | 201 ++++++++++++++++++++++++++++++++++
 matrix-synapse.obsinfo        |   6 +-
 matrix-synapse.spec           |  82 +++++++-------
 7 files changed, 250 insertions(+), 49 deletions(-)
 delete mode 100644 matrix-synapse-1.11.1.obscpio
 create mode 100644 matrix-synapse-1.12.1.obscpio

diff --git a/_service b/_service
index 040f53b..85fe984 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="url">https://github.com/matrix-org/synapse.git</param>
     <param name="scm">git</param>
-    <param name="revision">v1.11.1</param>
+    <param name="revision">v1.12.1</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <!--
     <param name="versionrewrite-pattern">v([\.\d]+)(rc.*)</param>
diff --git a/matrix-synapse-1.11.1.obscpio b/matrix-synapse-1.11.1.obscpio
deleted file mode 100644
index fad61ba..0000000
--- a/matrix-synapse-1.11.1.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7ac262ab6ee74268659529697ae41be6fb64efae2a5171060718bace41ef1653
-size 26549261
diff --git a/matrix-synapse-1.12.1.obscpio b/matrix-synapse-1.12.1.obscpio
new file mode 100644
index 0000000..ad7a4e8
--- /dev/null
+++ b/matrix-synapse-1.12.1.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6625de2a9ef0948b6804580fd427b276339dbef64a78e745ff1e90bec0df2ad1
+size 26577933
diff --git a/matrix-synapse-test.spec b/matrix-synapse-test.spec
index 15df0fc..6cc5eb3 100644
--- a/matrix-synapse-test.spec
+++ b/matrix-synapse-test.spec
@@ -32,7 +32,7 @@
 
 %define         pkgname matrix-synapse
 Name:           %{pkgname}-test
-Version:        1.11.1
+Version:        1.12.1
 Release:        0
 Summary:        Test package for %{pkgname}
 License:        Apache-2.0
diff --git a/matrix-synapse.changes b/matrix-synapse.changes
index 350a264..7b52454 100644
--- a/matrix-synapse.changes
+++ b/matrix-synapse.changes
@@ -1,3 +1,204 @@
+-------------------------------------------------------------------
+Thu Apr  2 16:28:51 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.12.1
+  - Fix starting workers when federation sending not split out.
+    (#7133). Introduced in v1.12.0.
+  - Avoid importing sqlite3 when using the postgres backend.
+    Contributed by David Vo. (#7155). Introduced in v1.12.0rc1.
+  - Fix a bug which could cause outbound federation traffic to stop
+    working if a client uploaded an incorrect e2e device signature.
+    (#7177). Introduced in v1.11.0.
+
+-------------------------------------------------------------------
+Tue Mar 24 15:31:47 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- use %requires_eq for runtime dependencies to make sure we always
+  use the versions we built with. we ran into cases where the
+  distro package was new enough according to the setup dependencies
+  but those were not up2date with the actual code.
+
+-------------------------------------------------------------------
+Mon Mar 23 14:36:36 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.12.0
+  Synapse may be vulnerable to request-smuggling attacks when it is
+  used with a reverse-proxy. The vulnerabilties are fixed in
+  Twisted 20.3.0, and are described in
+  [CVE-2020-10108](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10108)
+  and
+  [CVE-2020-10109](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10109).
+  For a good introduction to this class of request-smuggling
+  attacks, see
+  https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn.
+
+  We are not aware of these vulnerabilities being exploited in the
+  wild, and do not believe that they are exploitable with current
+  versions of any reverse proxies. Nevertheless, we recommend that
+  all Synapse administrators ensure that they have the latest
+  versions of the Twisted library to ensure that their installation
+  remains secure.
+
+  - Features
+    - Changes related to room alias management
+      ([MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432)):
+      - Publishing/removing a room from the room directory now
+        requires the user to have a power level capable of
+        modifying the canonical alias, instead of the room aliases.
+        ([\#6965](https://github.com/matrix-org/synapse/issues/6965))
+      - Validate the `alt_aliases` property of canonical alias
+        events.
+        ([\#6971](https://github.com/matrix-org/synapse/issues/6971))
+      - Users with a power level sufficient to modify the canonical
+        alias of a room can now delete room aliases.
+        ([\#6986](https://github.com/matrix-org/synapse/issues/6986))
+      - Implement updated authorization rules and redaction rules
+        for aliases events, from
+        [MSC2261](https://github.com/matrix-org/matrix-doc/pull/2261)
+        and
+        [MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432).
+        ([\#7037](https://github.com/matrix-org/synapse/issues/7037))
+      - Stop sending m.room.aliases events during room creation and
+        upgrade.
+        ([\#6941](https://github.com/matrix-org/synapse/issues/6941))
+      - Synapse no longer uses room alias events to calculate room
+        names for push notifications.
+        ([\#6966](https://github.com/matrix-org/synapse/issues/6966))
+      - The room list endpoint no longer returns a list of aliases.
+        ([\#6970](https://github.com/matrix-org/synapse/issues/6970))
+      - Remove special handling of aliases events from
+        [MSC2260](https://github.com/matrix-org/matrix-doc/pull/2260)
+        added in v1.10.0rc1.
+        ([\#7034](https://github.com/matrix-org/synapse/issues/7034))
+    - Expose the `synctl`, `hash_password` and `generate_config`
+      commands in the snapcraft package. Contributed by @devec0.
+      ([\#6315](https://github.com/matrix-org/synapse/issues/6315))
+    - Check that server_name is correctly set before running
+      database updates.
+      ([\#6982](https://github.com/matrix-org/synapse/issues/6982))
+    - Break down monthly active users by `appservice_id` and emit
+      via Prometheus.
+      ([\#7030](https://github.com/matrix-org/synapse/issues/7030))
+    - Render a configurable and comprehensible error page if
+      something goes wrong during the SAML2 authentication process.
+      ([\#7058](https://github.com/matrix-org/synapse/issues/7058),
+      [\#7067](https://github.com/matrix-org/synapse/issues/7067))
+    - Add an optional parameter to control whether other sessions
+      are logged out when a user's password is modified.
+      ([\#7085](https://github.com/matrix-org/synapse/issues/7085))
+    - Add prometheus metrics for the number of active pushers.
+      ([\#7103](https://github.com/matrix-org/synapse/issues/7103),
+      [\#7106](https://github.com/matrix-org/synapse/issues/7106))
+    - Improve performance when making HTTPS requests to sygnal,
+      sydent, etc, by sharing the SSL context object between
+      connections.
+      ([\#7094](https://github.com/matrix-org/synapse/issues/7094))
+  - Bugfixes
+    - When a user's profile is updated via the admin API, also
+      generate a displayname/avatar update for that user in each
+      room.
+      ([\#6572](https://github.com/matrix-org/synapse/issues/6572))
+    - Fix a couple of bugs in email configuration handling.
+      ([\#6962](https://github.com/matrix-org/synapse/issues/6962))
+    - Fix an issue affecting worker-based deployments where
+      replication would stop working, necessitating a full restart,
+      after joining a large room.
+      ([\#6967](https://github.com/matrix-org/synapse/issues/6967))
+    - Fix `duplicate key` error which was logged when rejoining a
+      room over federation.
+      ([\#6968](https://github.com/matrix-org/synapse/issues/6968))
+    - Prevent user from setting 'deactivated' to anything other
+      than a bool on the v2 PUT /users Admin API.
+      ([\#6990](https://github.com/matrix-org/synapse/issues/6990))
+    - Fix py35-old CI by using native tox package.
+      ([\#7018](https://github.com/matrix-org/synapse/issues/7018))
+    - Fix a bug causing `org.matrix.dummy_event` to be included in
+      responses from `/sync`.
+      ([\#7035](https://github.com/matrix-org/synapse/issues/7035))
+    - Fix a bug that renders UTF-8 text files incorrectly when
+      loaded from media. Contributed by @TheStranjer.
+      ([\#7044](https://github.com/matrix-org/synapse/issues/7044))
+    - Fix a bug that would cause Synapse to respond with an error
+      about event visibility if a client tried to request the state
+      of a room at a given token.
+      ([\#7066](https://github.com/matrix-org/synapse/issues/7066))
+    - Repair a data-corruption issue which was introduced in
+      Synapse 1.10, and fixed in Synapse 1.11, and which could
+      cause `/sync` to return with 404 errors about missing events
+      and unknown rooms.
+      ([\#7070](https://github.com/matrix-org/synapse/issues/7070))
+    - Fix a bug causing account validity renewal emails to be sent
+      even if the feature is turned off in some cases.
+      ([\#7074](https://github.com/matrix-org/synapse/issues/7074))
+  - Improved Documentation
+    - Updated CentOS8 install instructions. Contributed by Richard
+      Kellner.
+      ([\#6925](https://github.com/matrix-org/synapse/issues/6925))
+    - Fix `POSTGRES_INITDB_ARGS` in the
+      `contrib/docker/docker-compose.yml` example docker-compose
+      configuration.
+      ([\#6984](https://github.com/matrix-org/synapse/issues/6984))
+    - Change date in [INSTALL.md](./INSTALL.md#tls-certificates)
+      for last date of getting TLS certificates to November 2019.
+      ([\#7015](https://github.com/matrix-org/synapse/issues/7015))
+    - Document that the fallback auth endpoints must be routed to
+      the same worker node as the register endpoints.
+      ([\#7048](https://github.com/matrix-org/synapse/issues/7048))
+  - Deprecations and Removals
+    - Remove the unused query_auth federation endpoint per
+      [MSC2451](https://github.com/matrix-org/matrix-doc/pull/2451).
+      ([\#7026](https://github.com/matrix-org/synapse/issues/7026))
+  - Internal Changes
+    - Add type hints to `logging/context.py`.
+      ([\#6309](https://github.com/matrix-org/synapse/issues/6309))
+    - Add some clarifications to `README.md` in the database schema
+      directory.
+      ([\#6615](https://github.com/matrix-org/synapse/issues/6615))
+    - Refactoring work in preparation for changing the event
+      redaction algorithm.
+      ([\#6874](https://github.com/matrix-org/synapse/issues/6874),
+      [\#6875](https://github.com/matrix-org/synapse/issues/6875),
+      [\#6983](https://github.com/matrix-org/synapse/issues/6983),
+      [\#7003](https://github.com/matrix-org/synapse/issues/7003))
+    - Improve performance of v2 state resolution for large rooms.
+      ([\#6952](https://github.com/matrix-org/synapse/issues/6952),
+      [\#7095](https://github.com/matrix-org/synapse/issues/7095))
+    - Reduce time spent doing GC, by freezing objects on startup.
+      ([\#6953](https://github.com/matrix-org/synapse/issues/6953))
+    - Minor perfermance fixes to `get_auth_chain_ids`.
+      ([\#6954](https://github.com/matrix-org/synapse/issues/6954))
+    - Don't record remote cross-signing keys in the `devices`
+      table.
+      ([\#6956](https://github.com/matrix-org/synapse/issues/6956))
+    - Use flake8-comprehensions to enforce good hygiene of
+      list/set/dict comprehensions.
+      ([\#6957](https://github.com/matrix-org/synapse/issues/6957))
+    - Merge worker apps together.
+      ([\#6964](https://github.com/matrix-org/synapse/issues/6964),
+      [\#7002](https://github.com/matrix-org/synapse/issues/7002),
+      [\#7055](https://github.com/matrix-org/synapse/issues/7055),
+      [\#7104](https://github.com/matrix-org/synapse/issues/7104))
+    - Remove redundant `store_room` call from
+      `FederationHandler._process_received_pdu`.
+      ([\#6979](https://github.com/matrix-org/synapse/issues/6979))
+    - Update warning for incorrect database collation/ctype to
+      include link to documentation.
+      ([\#6985](https://github.com/matrix-org/synapse/issues/6985))
+    - Add some type annotations to the database storage classes.
+      ([\#6987](https://github.com/matrix-org/synapse/issues/6987))
+    - Port `synapse.handlers.presence` to async/await.
+      ([\#6991](https://github.com/matrix-org/synapse/issues/6991),
+      [\#7019](https://github.com/matrix-org/synapse/issues/7019))
+    - Add some type annotations to the federation base & client
+      classes.
+      ([\#6995](https://github.com/matrix-org/synapse/issues/6995))
+    - Port `synapse.rest.keys` to async/await.
+      ([\#7020](https://github.com/matrix-org/synapse/issues/7020))
+    - Add a type check to `is_verified` when processing room keys.
+      ([\#7045](https://github.com/matrix-org/synapse/issues/7045))
+    - Add type annotations and comments to the auth handler.
+      ([\#7063](https://github.com/matrix-org/synapse/issues/7063))
+
 -------------------------------------------------------------------
 Tue Mar  3 21:43:02 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
 
diff --git a/matrix-synapse.obsinfo b/matrix-synapse.obsinfo
index 11f90d3..7da1b22 100644
--- a/matrix-synapse.obsinfo
+++ b/matrix-synapse.obsinfo
@@ -1,5 +1,5 @@
 name: matrix-synapse
-version: 1.11.1
-mtime: 1583247703
-commit: 6b0ef34706e32121ff6f802d62b3eb8545785afe
+version: 1.12.1
+mtime: 1585823536
+commit: 529462b5c044f7f7491fd41ab7d0682d01a6236b
 
diff --git a/matrix-synapse.spec b/matrix-synapse.spec
index ad42776..e386e0f 100644
--- a/matrix-synapse.spec
+++ b/matrix-synapse.spec
@@ -46,7 +46,7 @@
 %define         modname synapse
 %define         pkgname matrix-synapse
 Name:           %{pkgname}
-Version:        1.11.1
+Version:        1.12.1
 Release:        0
 Summary:        Matrix protocol reference homeserver
 License:        Apache-2.0
@@ -77,102 +77,102 @@ Requires:       %{python_flavor} >= 3.5
 %endif
 # NOTE: Keep this is in the same order as synapse/python_dependencie.py.
 BuildRequires:  python3-Pillow >= 4.3.0
-Requires:       python3-Pillow >= 4.3.0
+%requires_eq    python3-Pillow
 BuildRequires:  python3-PyNaCl >= 1.2.1
-Requires:       python3-PyNaCl >= 1.2.1
+%requires_eq    python3-PyNaCl
 BuildRequires:  python3-PyYAML >= 3.11
-Requires:       python3-PyYAML >= 3.11
-BuildRequires:  python3-Twisted >= 18.9.0
-Requires:       python3-Twisted >= 18.9.0
+%requires_eq    python3-PyYAML
+BuildRequires:  python3-Twisted >= 20.3.0
+%requires_eq    python3-Twisted
 BuildRequires:  python3-attrs >= 17.4.0
-Requires:       python3-attrs >= 17.4.0
+%requires_eq    python3-attrs
 BuildRequires:  python3-bcrypt >= 3.1.0
-Requires:       python3-bcrypt >= 3.1.0
+%requires_eq    python3-bcrypt
 BuildRequires:  python3-bleach >= 1.4.3
-Requires:       python3-bleach >= 1.4.3
+%requires_eq    python3-bleach
 BuildRequires:  python3-canonicaljson >= 1.1.3
-Requires:       python3-canonicaljson >= 1.1.3
+%requires_eq    python3-canonicaljson
 BuildRequires:  python3-daemonize >= 2.3.1
-Requires:       python3-daemonize >= 2.3.1
+%requires_eq    python3-daemonize
 BuildRequires:  python3-frozendict >= 1
-Requires:       python3-frozendict >= 1
+%requires_eq    python3-frozendict
 BuildRequires:  python3-idna >= 2.5
-Requires:       python3-idna >= 2.5
+%requires_eq    python3-idna
 BuildRequires:  python3-jsonschema >= 2.5.1
-Requires:       python3-jsonschema >= 2.5.1
+%requires_eq    python3-jsonschema
 BuildRequires:  python3-msgpack >= 0.5.2
-Requires:       python3-msgpack >= 0.5.2
+%requires_eq    python3-msgpack
 BuildRequires:  python3-netaddr >= 0.7.18
-Requires:       python3-netaddr >= 0.7.18
+%requires_eq    python3-netaddr
 BuildRequires:  python3-phonenumbers >= 8.2.0
-Requires:       python3-phonenumbers >= 8.2.0
+%requires_eq    python3-phonenumbers
 BuildRequires:  python3-prometheus_client >= 0.4.0
-Requires:       python3-prometheus_client >= 0.4.0
+%requires_eq    python3-prometheus_client
 BuildRequires:  python3-psutil >= 2.0.0
-Requires:       python3-psutil >= 2.0.0
+%requires_eq    python3-psutil
 BuildRequires:  python3-pyOpenSSL >= 16.0.0
-Requires:       python3-pyOpenSSL >= 16.0.0
+%requires_eq    python3-pyOpenSSL
 BuildRequires:  python3-pyasn1 >= 0.1.9
-Requires:       python3-pyasn1 >= 0.1.9
+%requires_eq    python3-pyasn1
 BuildRequires:  python3-pyasn1-modules >= 0.0.7
-Requires:       python3-pyasn1-modules >= 0.0.7
+%requires_eq    python3-pyasn1-modules
 BuildRequires:  python3-pymacaroons >= 0.13.0
-Requires:       python3-pymacaroons >= 0.13.0
+%requires_eq    python3-pymacaroons
 BuildRequires:  python3-service_identity >= 18.1.0
-Requires:       python3-service_identity >= 18.1.0
+%requires_eq    python3-service_identity
 BuildRequires:  python3-signedjson >= 1.1.0
-Requires:       python3-signedjson >= 1.1.0
+%requires_eq    python3-signedjson
 BuildRequires:  python3-six >= 1.10
-Requires:       python3-six >= 1.10
+%requires_eq    python3-six
 BuildRequires:  python3-sortedcontainers >= 1.4.4
-Requires:       python3-sortedcontainers >= 1.4.4
+%requires_eq    python3-sortedcontainers
 BuildRequires:  python3-systemd  >= 231
-Requires:       python3-systemd  >= 231
+%requires_eq    python3-systemd
 BuildRequires:  python3-typing_extensions >= 3.7.4
-Requires:       python3-typing_extensions >= 3.7.4
+%requires_eq    python3-typing_extensions
 BuildRequires:  python3-treq >= 15.1
-Requires:       python3-treq >= 15.1
+%requires_eq    python3-treq
 BuildRequires:  python3-unpaddedbase64 >= 1.1.0
-Requires:       python3-unpaddedbase64 >= 1.1.0
+%requires_eq    python3-unpaddedbase64
 # Specify all CONDITIONAL_REQUIREMENTS (we Require them to avoid no-recommends
 # breaking very commonly-used bits of matrix-synapse such as postgresql).
 %if %{with email_notifs}
 BuildRequires:  python3-Jinja2 >= 2.9
-Requires:       python3-Jinja2 >= 2.9
+%requires_eq    python3-Jinja2
 %endif
 %if %{with ldap}
 BuildRequires:  python3-matrix-synapse-ldap3 >= 0.1
-Requires:       python3-matrix-synapse-ldap3 >= 0.1
+%requires_eq    python3-matrix-synapse-ldap3
 %endif
 %if %{with postgres}
 BuildRequires:  python3-psycopg2 >= 2.7
-Requires:       python3-psycopg2 >= 2.7
+%requires_eq    python3-psycopg2
 %endif
 %if %{with acme}
 BuildRequires:  python3-txacme >= 0.9.2
-Requires:       python3-txacme >= 0.9.2
+%requires_eq    python3-txacme
 %endif
 %if %{with saml}
 BuildRequires:  python3-pysaml2 >= 4.5.0
-Requires:       python3-pysaml2 >= 4.5.0
+%requires_eq    python3-pysaml2
 %endif
 %if %{with url_preview}
 BuildRequires:  python3-lxml >= 3.5.0
-Requires:       python3-lxml >= 3.5.0
+%requires_eq    python3-lxml
 %endif
 %if %{with sentry}
 BuildRequires:  python3-sentry-sdk >= 0.7.2
-Requires:       python3-sentry-sdk >= 0.7.2
+%requires_eq    python3-sentry-sdk
 %endif
 %if %{with jwt}
 BuildRequires:  python3-PyJWT >= 1.6.4
-Requires:       python3-PyJWT >= 1.6.4
+%requires_eq    python3-PyJWT
 %endif
 %if %{with opentracing}
 BuildRequires:  python3-jaeger-client >= 4.0.0
-Requires:       python3-jaeger-client >= 4.0.0
+%requires_eq    python3-jaeger-client
 BuildRequires:  python3-opentracing   >= 2.2.0
-Requires:       python3-opentracing   >= 2.2.0
+%requires_eq    python3-opentracing
 %endif
 BuildArch:      noarch
 # We only provide/obsolete python2 to ensure that users upgrade.