Commit Graph

37 Commits

Author SHA256 Message Date
Aleksa Sarai
09a7c994d8 Accepting request 844322 from home:darix:apps
- Update to 1.22.0

OBS-URL: https://build.opensuse.org/request/show/844322
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=149
2020-10-27 20:16:34 +00:00
4c5b1c1305 Accepting request 841978 from home:darix:apps
- prepare to support more optional features in the buildrequires
  (oidc/redis). failing atm due to missing libraries

- Update to 1.21.2 
  - Security advisory
    - HTML pages served via Synapse were vulnerable to cross-site
      scripting (XSS) attacks. All server administrators are
      encouraged to upgrade. (#8444) (CVE-2020-26891)
    - This fix was originally included in v1.21.0 but was missing a
      security advisory.  This was reported by Denis Kasak.
  - Bugfixes
    - Fix rare bug where sending an event would fail due to a racey
      assertion. (#8530)
    - An updated version of the authlib dependency is included in
      the Docker and Debian images to fix an issue using OpenID
      Connect. See #8534 for details.

OBS-URL: https://build.opensuse.org/request/show/841978
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=147
2020-10-15 17:17:52 +00:00
7803f922fb Accepting request 841805 from home:darix:apps
- Update to 1.21.1

OBS-URL: https://build.opensuse.org/request/show/841805
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=146
2020-10-15 11:49:16 +00:00
Aleksa Sarai
14bfdefd29 Accepting request 837220 from home:darix:apps
- Update to 1.20.1
  - Bugfixes
    - Fix a bug introduced in v1.20.0 which caused the
      synapse_port_db script to fail. (#8386)
    - Fix a bug introduced in v1.20.0 which caused variables to be
      incorrectly escaped in Jinja2 templates. (#8394)

OBS-URL: https://build.opensuse.org/request/show/837220
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=144
2020-09-24 19:18:17 +00:00
Aleksa Sarai
a040bca4a7 Accepting request 836124 from home:darix:apps
- Update to 1.20.0

OBS-URL: https://build.opensuse.org/request/show/836124
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=142
2020-09-24 02:35:42 +00:00
2b3786b56e - Update to synapse 1.19.3
- Bugfixes
    - Partially mitigate bug where newly joined servers couldn't
      get past events in a room when there is a malformed event.
      (#8350)
- Update to synapse 1.19.2

OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=141
2020-09-18 16:26:30 +00:00
8c2a86932c - Update to synapse to 1.19.2
- Bugfixes
    - Fix joining rooms over federation that include malformed
      events.
      ([\#8324](https://github.com/matrix-org/synapse/issues/8324))

OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=139
2020-09-16 14:07:06 +00:00
Aleksa Sarai
f36abf54f9 Accepting request 830005 from home:darix:apps
- Update to synapse to 1.19.1

OBS-URL: https://build.opensuse.org/request/show/830005
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=137
2020-08-29 04:19:03 +00:00
Aleksa Sarai
bee2b5ed82 Accepting request 823566 from home:cyphar:matrix
Update to matrix-synapse 1.18.0.

OBS-URL: https://build.opensuse.org/request/show/823566
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=135
2020-07-31 01:32:57 +00:00
Aleksa Sarai
bc99c77ef8 Accepting request 820683 from home:darix:apps
- Update to 1.17.0 
- allow newer prometheus client (follow up to change in the code)

OBS-URL: https://build.opensuse.org/request/show/820683
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=133
2020-07-15 22:57:41 +00:00
Aleksa Sarai
4c9e70ff8f Accepting request 819988 from home:darix:apps
- Update to 1.16.1 
  - Drop table local_rejections_stream which was incorrectly added
    in Synapse 1.16.0. (#7816, b1beb3ff5)

OBS-URL: https://build.opensuse.org/request/show/819988
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=132
2020-07-11 06:58:32 +00:00
Aleksa Sarai
579e42b880 Accepting request 819455 from home:darix:apps
- Update to 1.16.0

OBS-URL: https://build.opensuse.org/request/show/819455
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=131
2020-07-08 16:19:09 +00:00
Oliver Kurz
a9e23b56df Accepting request 818369 from home:darix:apps
- Update to 1.15.2
  - Security
    - A malicious homeserver could force Synapse to reset the state
      in a room to a small subset of the correct state. This
      affects all Synapse deployments which federate with untrusted
      servers. (96e9afe6)
    - HTML pages served via Synapse were vulnerable to clickjacking
      attacks. This predominantly affects homeservers with
      single-sign-on enabled, but all server administrators are
      encouraged to upgrade. (ea26e9a9)

OBS-URL: https://build.opensuse.org/request/show/818369
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=130
2020-07-02 16:30:31 +00:00
Aleksa Sarai
9417020078 Accepting request 815307 from home:darix:apps
- Update to 1.15.1 
  - Fix a bug introduced in v1.15.0 that would crash Synapse on
    start when using certain password auth providers. (#7684)
  - Fix a bug introduced in v1.15.0 which meant that some 3PID
    management endpoints were not accessible on the correct URL.

OBS-URL: https://build.opensuse.org/request/show/815307
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=129
2020-06-17 05:43:44 +00:00
Aleksa Sarai
3a7795e617 Accepting request 813544 from home:darix:apps
- Update to 1.15.0

OBS-URL: https://build.opensuse.org/request/show/813544
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=127
2020-06-12 13:34:31 +00:00
Aleksa Sarai
e7bc127d64 Accepting request 809913 from home:darix:apps
- Update to 1.14.0

OBS-URL: https://build.opensuse.org/request/show/809913
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=125
2020-05-28 15:25:54 +00:00
Aleksa Sarai
0aa1ce1927 Accepting request 807359 from home:darix:apps
- Update to 1.13.0
  This release brings some potential changes necessary for certain
  configurations of Synapse:
  - If your Synapse is configured to use SSO and have a custom
    sso_redirect_confirm_template_dir configuration option set, you
    will need to duplicate the new sso_auth_confirm.html,
    sso_auth_success.html and sso_account_deactivated.html
    templates into that directory.
  - Synapse plugins using the complete_sso_login method of
    synapse.module_api.ModuleApi should instead switch to the
    async/await version, complete_sso_login_async, which includes
    additional checks. The former version is now deprecated.
  - A bug was introduced in Synapse 1.4.0 which could cause the
    room directory to be incomplete or empty if Synapse was
    upgraded directly from v1.2.1 or earlier, to versions between
    v1.4.0 and v1.12.x.
  Please review UPGRADE.rst for more details on these changes and
  for general upgrade guidance.
  For the complete list of changes please refer to
  https://github.com/matrix-org/synapse/releases/tag/v1.13.0

OBS-URL: https://build.opensuse.org/request/show/807359
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=124
2020-05-20 02:30:32 +00:00
2012c8a13a Accepting request 796598 from home:darix:apps
- Update to 1.12.4
  - Features:
    - Always send users their own device updates. (#7160)
    - Add support for handling GET requests for account_data on a
      worker. (#7311)
  - Bugfixes:
    - Fix a bug that prevented cross-signing with users on
      worker-mode synapses. (#7255)
    - Do not treat display names as globs in push rules. (#7271)
    - Fix a bug with cross-signing devices belonging to remote
      users who did not share a room with any user on the local
      homeserver. (#7289)

OBS-URL: https://build.opensuse.org/request/show/796598
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=123
2020-04-23 17:09:33 +00:00
32d877450a Accepting request 791955 from home:darix:apps
- Update to 1.12.3
  - Remove the pin to Pillow 7.0 which was introduced in Synapse
    1.12.2, and correctly fix the issue with building the Debian
    packages. (#7212)

- Update to 1.12.2
  - This release fixes an issue with building the debian packages.

OBS-URL: https://build.opensuse.org/request/show/791955
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=122
2020-04-07 10:43:35 +00:00
c61ca25981 Accepting request 790969 from home:darix:apps
- Update to 1.12.1

OBS-URL: https://build.opensuse.org/request/show/790969
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=121
2020-04-02 16:41:09 +00:00
0fa46ec216 Accepting request 781565 from home:darix:apps
- Update to 1.11.1 
  This release includes a security fix impacting installations
  using Single Sign-On (i.e. SAML2 or CAS) for authentication.
  Administrators of such installations are encouraged to upgrade as
  soon as possible.
  - Bugfixes
    - Add a confirmation step to the SSO login flow before
      redirecting users to the redirect URL.
      ([b2bd54a2](b2bd54a2e3),
      [65c73cdf](65c73cdfec),
      [a0178df1](a0178df104))
    - Fixed set a user as an admin with the admin API `PUT
      /_synapse/admin/v2/users/<user_id>`. Contributed by
      @dklimpel.
      ([\#6910](https://github.com/matrix-org/synapse/issues/6910))
    - Fix bug introduced in Synapse 1.11.0 which sometimes caused
      errors when joining rooms over federation, with `'coroutine'
      object has no attribute 'event_id'`.
      ([\#6996](https://github.com/matrix-org/synapse/issues/6996))

- track series file to make updating patches easier

OBS-URL: https://build.opensuse.org/request/show/781565
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=119
2020-03-04 14:48:28 +00:00
Aleksa Sarai
0bbdbfc968 Accepting request 777958 from home:cyphar:matrix
- Update to 1.11.0.

  * Limit the number of events that can be requested by the backfill federation
    API to 100.
  * Reject device display names over 100 characters in length to prevent abuse.
  * Implement new aliases endpoint as per MSC2432.
  * Stop sending m.room.alias events wheng adding / removing aliases. Check
    alt_aliases in the latest m.room.canonical_alias event when deleting an
    alias.
  * Change the default power levels of invites, tombstones and server ACLs for
    new rooms.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/777958
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=117
2020-02-21 13:07:51 +00:00
Aleksa Sarai
f7aa4a8127 Accepting request 773720 from home:cyphar:matrix
- Update to 1.10.0.

  WARNING to client developers: As of this release Synapse validates
  client_secret parameters in the Client-Server API as per the spec. See #6766
  for details.

  + Add experimental support for updated authorization rules for aliases
    events, from MSC2260.
  + Variety of E2EE improvements, most notably:
    * Fix bug where querying a remote user's device keys that weren't cached
      resulted in only returning a single device.
    * Fix bug where Synapse didn't invalidate cache of remote users' devices
      when Synapse left a room.
    * Detect unknown remote devices and mark cache as stale.
    * Attempt to resync remote users' devices when detected as stale.
    * When a client asks for a remote user's device keys check if the local
      cache for that user has been marked as potentially stale.
    * Detect unexpected sender keys on remote encrypted events and resync
      device lists.
    * Fix an issue with cross-signing where device signatures were not sent to
      remote servers.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/773720
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=114
2020-02-12 15:15:02 +00:00
Oliver Kurz
2aa555d25e Disable tests which can not work after https://build.opensuse.org/request/show/768057
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=112
2020-02-06 16:49:25 +00:00
Oliver Kurz
402688c118 Accepting request 768057 from home:darix:apps
- update to 1.9.1
  Fix bug where setting mau_limit_reserved_threepids config would
  cause Synapse to refuse to start. (#6793)

- package cleanup
  - make sure we have all libraries to actually install the package:
    - buildrequires all runtime requirements
    - (build)require python3-typing_extensions
  - having it use the python package name is not really useful here.
  - refreshed and renamed better-paths.patch to
    matrix-synapse-1.4.1-paths.patch
  - also fix existing synapse user
    - group to synapse instead of nogroup
    - home directory to /var/lib/matrix-synapse
    - shell to /bin/false (which actually exists)
  - improvements to the logging configuration:
    - install copy of the current /etc/matrix-synapse/log.yaml as
      /etc/matrix-synapse/log.systemd.yaml
    - install /etc/matrix-synapse/log.file.yaml which logs to
      /var/log/matrix-synapse/homeserver.log
    - add the log directory /var/log/matrix-synapse/
  - added README.SUSE
  - better way to bootstrap a new config:
    1. ExecStartPre would have never worked anyway
    2. added %{_sbindir}/matrix-synapse-generate-config
    Usage:
    %{_sbindir}/matrix-synapse-generate-config servername
  - fix group and shell for the synapse user
  - added better-paths.patch
    - put the pid file into /run/matrix-synapse/
    - use a default logging config in /etc/matrix-synapse/log.yaml
      to have systemd logging by default
  - use full path in the service file
  - actually use source 50 instead of the service file in the tarball
  - make permissions tighter on the config files as it contains
    passwords and other secrets:
    root:synapse u=rwX,g=rX,o=

OBS-URL: https://build.opensuse.org/request/show/768057
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=111
2020-02-03 10:56:06 +00:00
Aleksa Sarai
bb27e1750d Accepting request 766606 from home:cyphar:matrix
- Update to 1.9.0.

  WARNING: As of this release, Synapse no longer supports versions of SQLite
  before 3.11, and will refuse to start when configured to use an older
  version. Administrators are recommended to migrate their database to Postgres
  (see instructions here).

  WARNING: If your Synapse deployment uses workers, note that the reverse-proxy
  configurations for the synapse.app.media_repository,
  synapse.app.federation_reader and synapse.app.event_creator workers have
  changed, with the addition of a few paths (see the updated configurations
  here). Existing configurations will continue to work.

  + Allow admin to create or modify a user.
  + Add new quarantine media admin APIs to quarantine by media ID or by user
    who uploaded the media.
  + Add a new admin API to list and filter rooms on the server.
  + Add org.matrix.e2e_cross_signing to unstable_features in /versions.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/766606
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=109
2020-01-23 15:57:20 +00:00
Aleksa Sarai
2ca250c25d Accepting request 762836 from home:cyphar:matrix
- Update to 1.8.0.

  WARNING: As of this release Synapse will refuse to start if the log_file
  config option is specified. Support for the option was removed in v1.3.0.

  * Add v2 APIs for the send_join and send_leave federation endpoints (as
    described in MSC1802).
  * Add a develop script to generate full SQL schemas.
  * Add custom SAML username mapping functinality through an external provider
    plugin.
  * Automatically delete empty groups/communities.
  * Add option limit_profile_requests_to_users_who_share_rooms to prevent
    requirement of a local user sharing a room with another user to query their
    profile information.
  * Add an export_signing_key script to extract the public part of signing keys
    when rotating them.
  * Add experimental config option to specify multiple databases.
  * Raise an error if someone tries to use the log_file config option.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/762836
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=107
2020-01-10 20:56:44 +00:00
Aleksa Sarai
29e9b19a10 Accepting request 760199 from home:cyphar:matrix
- Update to 1.7.3.

  * Fix exceptions caused by state resolution choking on malformed events.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/760199
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=105
2020-01-01 04:09:47 +00:00
Aleksa Sarai
e008c5d4f5 Accepting request 758614 from home:cyphar:matrix
- Update to 1.7.2.

  * Fix a regression introduced in Synapse 1.7.1 which caused errors when
    attempting to backfill rooms over federation.
  * Fix a bug introduced in Synapse 1.7.0 which caused an error on startup when
    upgrading from versions before 1.3.0.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/758614
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=102
2019-12-20 22:54:38 +00:00
Aleksa Sarai
a5a5e5b5e6 Accepting request 757734 from home:cyphar:matrix
- Update to 1.7.1.

  This update fixes several majar security issues. Users are very strongly
  recommended to update as soon as possible.

  * Fix a bug which could cause room events to be incorrectly authorized using
    events from a different room.
  * Fix a bug causing responses to the /context client endpoint to not use the
    pruned version of the event.
  * Fix a cause of state resets in room versions 2 onwards.
  * Fix a bug which could cause the federation server to incorrectly return
    errors when handling certain obscure event graphs.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/757734
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=99
2019-12-18 12:16:20 +00:00
Oliver Kurz
a36600555c Accepting request 756814 from home:cyphar:matrix
- Update to 1.7.0.

  * Implement per-room message retention policies.
  * Add etag and count fields to key backup endpoints to help clients guess if
    there are new keys.
  * Configure privacy-preserving settings by default for the room directory.
  * Add ephemeral messages support by partially implementing MSC2228.
  * Add support for MSC 2367, which allows specifying a reason on all
    membership events.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/756814
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=97
2019-12-15 12:34:18 +00:00
Aleksa Sarai
ff36a55492 Accepting request 751595 from home:cyphar:matrix
- Update to 1.6.1.

  * Clean up local threepids from user on account deactivation.
  * Fix startup error when http proxy is defined.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/751595
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=94
2019-11-28 12:20:05 +00:00
Aleksa Sarai
a546143a76 Accepting request 751528 from home:cyphar:matrix
- Update to 1.6.0.

  + Add federation support for cross-signing.
  + Increase default room version from 4 to 5, thereby enforcing server key validity period checks.
  + Add support for outbound http proxying via http_proxy/HTTPS_PROXY env vars.
  + Implement label-based filtering on /sync and /messages (MSC2326).

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/751528
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=93
2019-11-28 09:02:03 +00:00
Aleksa Sarai
141ff9ccdc Accepting request 749295 from home:cyphar:matrix
- Update to 1.5.1.

  * Limit the length of data returned by url previews, to prevent DoS attacks.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/749295
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=91
2019-11-18 11:29:29 +00:00
Aleksa Sarai
f02fe39d76 Accepting request 743952 from home:cyphar:matrix
- Update to 1.5.0.

  + Improve quality of thumbnails for 1-bit/8-bit color palette images.
  + Add ability to upload cross-signing signatures.
  + Allow uploading of cross-signing keys.
  + CAS login now provides a default display name for users if a
    displayname_attribute is set in the configuration file.
  + Reject all pending invites for a user during deactivation.
  + Add config option to suppress client side resource limit alerting.

  * Improve signature checking on some federation APIs.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/743952
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=89
2019-10-30 06:57:00 +00:00
Aleksa Sarai
c488294ef8 Accepting request 741083 from home:cyphar:matrix
- Update to 1.4.1.

  * Fix bug where redacted events were sometimes incorrectly censored in the
    database, breaking APIs that attempted to fetch such events.

  The full changelog is included in
  /usr/share/doc/packages/matrix-synapse/CHANGES.md.

OBS-URL: https://build.opensuse.org/request/show/741083
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=87
2019-10-18 17:07:25 +00:00
Aleksa Sarai
8bd8f596f5 osc copypac from project:home:cyphar:matrix package:matrix-synapse revision:2
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=83
2019-10-03 22:23:50 +00:00