diff --git a/_service b/_service index 51fea58..d4d9fae 100644 --- a/_service +++ b/_service @@ -4,11 +4,11 @@ @PARENT_TAG@ https://github.com/matrix-org/synapse.git git - v1.92.3 + v1.93.0 v(.*) \1 diff --git a/matrix-synapse-1.92.3.obscpio b/matrix-synapse-1.92.3.obscpio deleted file mode 100644 index 2df173d..0000000 --- a/matrix-synapse-1.92.3.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:90148eebf7b4080ec4426230d6769155e9d6e4bdbce77c5d164cc1df2a21c046 -size 35512845 diff --git a/matrix-synapse-1.93.0.obscpio b/matrix-synapse-1.93.0.obscpio new file mode 100644 index 0000000..80e6c1a --- /dev/null +++ b/matrix-synapse-1.93.0.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f157afec4f14f73cb310e600cd21e5baa615e8a6ea2597a84fb33a542cb21bee +size 35584013 diff --git a/matrix-synapse-test.spec b/matrix-synapse-test.spec index bc88f06..2719a64 100644 --- a/matrix-synapse-test.spec +++ b/matrix-synapse-test.spec @@ -27,7 +27,7 @@ %define pkgname matrix-synapse Name: %{pkgname}-test -Version: 1.92.3 +Version: 1.93.0 Release: 0 Summary: Test package for %{pkgname} License: Apache-2.0 diff --git a/matrix-synapse.changes b/matrix-synapse.changes index e053626..18bb1bf 100644 --- a/matrix-synapse.changes +++ b/matrix-synapse.changes @@ -1,3 +1,101 @@ +------------------------------------------------------------------- +Tue Sep 26 17:35:26 UTC 2023 - Marcus Rueckert + +- Update to 1.93.0 + The following issues are fixed in 1.93.0 (and RCs). + + GHSA-4f74-84v3-j9q5 / CVE-2023-41335 — Low Severity + https://github.com/matrix-org/synapse/security/advisories/GHSA-4f74-84v3-j9q5 + + Temporary storage of plaintext passwords during password changes. + + GHSA-7565-cq32-vx2x / CVE-2023-42453 — Low Severity + https://github.com/matrix-org/synapse/security/advisories/GHSA-7565-cq32-vx2x + + Improper validation of receipts allows forged read receipts. + + See the advisories for more details. If you have any questions, email security@matrix.org. + + + - Features + - Add automatic purge after all users have forgotten a room. + (#15488) + - Restore room purge/shutdown after a Synapse restart. (#15488) + - Support resolving homeservers using matrix-fed DNS SRV + records from MSC4040. (#16137) + - Add the ability to use G (GiB) and T (TiB) suffixes in + configuration options that refer to numbers of bytes. + (#16219) + - Add span information to requests sent to appservices. + Contributed by MTRNord. (#16227) + - Add the ability to enable/disable registrations when using + CAS. Contributed by Aurélien Grimpard. (#16262) + - Allow the /notifications endpoint to be routed to workers. + (#16265) + - Enable users to easily unsubscribe to notifications emails + via the List-Unsubscribe header. (#16274) + - Report whether a user is locked in the List Accounts admin + API, and exclude locked users by default. (#16328) + - Bugfixes + - Fix a long-standing bug where multi-device accounts could + cause high load due to presence. (#16066, #16170, #16171, + #16172, #16174) + - Fix a long-standing bug where appservices using MSC2409 to + receive to_device messages would only get messages for one + user. (#16251) + - Fix bug when using workers where Synapse could end up + re-requesting the same remote device repeatedly. (#16252) + - Fix long-standing bug where we kept re-requesting a remote + server's key repeatedly, potentially causing delays in + receiving events over federation. (#16257) + - Avoid temporary storage of sensitive information. (#16272) + - Fix bug introduced in Synapse 1.49.0 when using dehydrated + devices (MSC2697) and refresh tokens. Contributed by Hanadi. + (#16288) + - Fix a long-standing bug where invalid receipts would be + accepted. (#16327) + - Use standard name for UTF-8 charset in emails. (#16329) + - Don't try refetching device lists for users on remote hosts + that are marked as "down". (#16298) + - Improved Documentation + - Fix typos in the documentation. (#16282) + - Link to the Alpine Linux community package for Synapse. + (#16304) + - Use string for federation_client_minimum_tls_version + documentation examples. Contributed by @jcgruenhage. (#16353) + - Internal Changes + - Allow modules to delete rooms. (#15997) + - Add GCC and GNU Make to the Nix flake development environment + so that ruff can be compiled. (#16090, #16263) + - Fix type checking when using the new version of Twisted. + (#16235) + - Delete device messages asynchronously and in staged batches + using the task scheduler. (#16240, #16311, #16312, #16313) + - Bump minimum supported Rust version to 1.61.0. (#16248) + - Update rust to version 1.71.1 in the nix development + environment. (#16260) + - Simplify server key storage. (#16261) + - Reduce CPU overhead of change password endpoint. (#16264) + - Stop purging from tables slated for removal. (#16273) + - Improve type hints. (#16276, #16301, #16325, #16326) + - Raise setuptools_rust version cap to 1.7.0. (#16277) + - Fix using the new task scheduler causing lots of CPU to be + used. (#16278) + - Upgrade CI run of Python 3.12 from rc1 to rc2. (#16280) + - Include values in SQL debug when using execute_values with + Postgres. (#16281) + - Enable additional linting checks. (#16283) + - Refactor receipts_graph Postgres transactions to stop error + messages. (#16299) + - Small improvements to logging in replication code. (#16309) + - Remove a reference cycle in background processes. (#16314) + - Only use literal strings for background process names. + (#16315) + - Refactor get_user_by_id. (#16316) + - Speed up task to delete to-device messages. (#16318) + - Avoid patching code in tests. (#16349) + - Test against PostgreSQL 16. (#16351) + ------------------------------------------------------------------- Mon Sep 25 23:09:42 UTC 2023 - Marcus Rueckert diff --git a/matrix-synapse.obsinfo b/matrix-synapse.obsinfo index 9ef1f66..e108d44 100644 --- a/matrix-synapse.obsinfo +++ b/matrix-synapse.obsinfo @@ -1,4 +1,4 @@ name: matrix-synapse -version: 1.92.3 -mtime: 1695044157 -commit: e36990c00e201b35b62a91991be15c35edb20d8d +version: 1.93.0 +mtime: 1695740214 +commit: 88ba67eb91215a708f321e16559fe3c2c0d0a407 diff --git a/matrix-synapse.spec b/matrix-synapse.spec index 9a768b3..a635cff 100644 --- a/matrix-synapse.spec +++ b/matrix-synapse.spec @@ -154,7 +154,7 @@ %define pkgname matrix-synapse %define eggname matrix_synapse Name: %{pkgname} -Version: 1.92.3 +Version: 1.93.0 Release: 0 Summary: Matrix protocol reference homeserver License: Apache-2.0 @@ -188,7 +188,7 @@ BuildRequires: systemd-rpm-macros BuildRequires: sysuser-shadow BuildRequires: sysuser-tools BuildRequires: unzip -BuildRequires: (%{use_python}-poetry-core >= 1.0.0 with %{use_python}-poetry-core =< 1.7.0) +BuildRequires: (%{use_python}-poetry-core >= 1.1.0 with %{use_python}-poetry-core =< 1.7.0) %{?systemd_ordering} %{sysusers_requires} %requires_peq %{use_python}-base diff --git a/vendor.tar.zst b/vendor.tar.zst index b96fdd9..12afce8 100644 --- a/vendor.tar.zst +++ b/vendor.tar.zst @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:7b26ed3c343eb29af62e73dadc59813a8a3e142c62208b906a525fef27b56078 -size 5755545 +oid sha256:2da7c77d5281c44f4627669634dedb57e1a57fb35314306aff79d8f6b7d7466b +size 5765828