205198a752
Accepting request 1129636 from home:darix:apps
...
- Update to 1.97.0
OBS-URL: https://build.opensuse.org/request/show/1129636
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=304
2023-11-28 15:24:40 +00:00
5582386a8d
Accepting request 1127379 from home:darix:apps
...
- Update to 1.96.0
OBS-URL: https://build.opensuse.org/request/show/1127379
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=302
2023-11-17 23:52:57 +00:00
63706e9c6c
Accepting request 1123775 from home:dimstar:Factory
...
Fix build with RPM 4.19: unnumbered patches are no longer supported.
OBS-URL: https://build.opensuse.org/request/show/1123775
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=300
2023-11-07 10:27:05 +00:00
e566aac147
add missing bugnumber
...
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=298
2023-11-02 11:33:08 +00:00
3d5bf2cc09
Accepting request 1121496 from home:darix:apps
...
- Update to 1.95.1
- Security:
- GHSA-mp92-3jfm-3575 / CVE-2023-43796 — Moderate Severity
Cached device information of remote users can be queried from
Synapse. This can be used to enumerate the remote users known
to a homeserver.
OBS-URL: https://build.opensuse.org/request/show/1121496
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=296
2023-10-31 20:07:10 +00:00
2eb079666a
Accepting request 1120123 from home:darix:apps
...
- Update to 1.95.0
OBS-URL: https://build.opensuse.org/request/show/1120123
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=294
2023-10-24 20:00:44 +00:00
33f961dbab
Accepting request 1116888 from home:darix:apps
...
- Update to 1.94.0 (boo#1216126 CVE-2023-45129)
GHSA-5chr-wjw5-3gq4 / CVE-2023-45129 — Moderate Severity
A malicious server ACL event can impact performance temporarily
or permanently leading to a persistent denial of service.
Homeservers running on a closed federation (which presumably do
not need to use server ACLs) are not affected.
OBS-URL: https://build.opensuse.org/request/show/1116888
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=292
2023-10-11 10:21:26 +00:00
ff899420ed
Accepting request 1116682 from home:darix:apps
...
- Update to 1.94.0
OBS-URL: https://build.opensuse.org/request/show/1116682
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=290
2023-10-10 14:02:02 +00:00
fd426452c9
Accepting request 1113707 from home:darix:apps
...
- Update to 1.93.0
OBS-URL: https://build.opensuse.org/request/show/1113707
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=288
2023-09-26 17:40:26 +00:00
3548a07d65
Accepting request 1113560 from home:darix:apps
...
- Update to 1.92.3
This release does not affect openSUSE as we do not use the intree
libwebp
Upstream changes:
This is again a security update targeted at mitigating
CVE-2023-4863. It turns out that libwebp is bundled statically in
Pillow wheels so we need to update this dependency instead of
libwebp package at the OS level.
Unlike what was advertised in 1.92.2 changelog this release also
impacts PyPI wheels and Debian packages from matrix.org.
We encourage admins to upgrade as soon as possible.
Internal Changes
- Pillow 10.0.1 is now mandatory because of libwebp
CVE-2023-4863, since Pillow provides libwebp in the wheels.
(#16347 )
- bump all the dependencies which are not available in tumbleweed.
- Update to 1.92.2
Only fix in this is actually changing the upstream docker
configuration to mitigate the webp security bug. Does not affect
our package.
- Update to 1.92.1
- Bugfixes
- Revert MSC3861 introspection cache, admin impersonation and
account lock. (#16258 )
- Internal Changes
- Fix incorrect docstring for Ratelimiter. (#16255 )
- Update the release script to work on macOS. (#16266 )
- Stop building Ubuntu Kinetic since it is EOL and repos seem
OBS-URL: https://build.opensuse.org/request/show/1113560
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=287
2023-09-25 23:13:20 +00:00
732a56b96c
Accepting request 1109344 from home:darix:apps
...
- Update to 1.91.2
OBS-URL: https://build.opensuse.org/request/show/1109344
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=285
2023-09-06 20:50:53 +00:00
Oliver Kurz
89f349ba3d
Accepting request 1104037 from home:darix:apps
...
- Update to 1.90.0
OBS-URL: https://build.opensuse.org/request/show/1104037
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=283
2023-08-28 12:08:40 +00:00
c926da9e4c
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=281
2023-07-27 16:29:33 +00:00
3500854110
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=280
2023-07-26 20:57:39 +00:00
ceb1123ef0
Accepting request 1100849 from home:dirkmueller:Factory
...
- switch to _multibuild
OBS-URL: https://build.opensuse.org/request/show/1100849
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=279
2023-07-26 12:45:04 +00:00
27fc6e051e
Accepting request 1099302 from home:darix:apps
...
- Update to 1.88.0
OBS-URL: https://build.opensuse.org/request/show/1099302
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=278
2023-07-20 12:11:12 +00:00
Oliver Kurz
4a890fecd8
Accepting request 1097605 from home:darix:apps
...
- Update to 1.87.0
OBS-URL: https://build.opensuse.org/request/show/1097605
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=277
2023-07-13 17:42:37 +00:00
Aleksa Sarai
54eae36595
Accepting request 1091721 from home:darix:apps
...
- Update to 1.85.2
- Bugfixes
- Fix regression where using TLS for HTTP replication between
workers did not work. Introduced in v1.85.0. (#15746 )
OBS-URL: https://build.opensuse.org/request/show/1091721
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=275
2023-06-21 06:17:28 +00:00
Aleksa Sarai
291f685119
Accepting request 1091284 from home:darix:apps
...
- Update to 1.85.1
Note: this release only fixes a bug that stopped some deployments
from upgrading to v1.85.0. There is no need to upgrade to v1.85.1
if successfully running v1.85.0.
- Bugfixes
- Fix bug in schema delta that broke upgrades for some
deployments. Introduced in v1.85.0. (#15738 , #15739 )
OBS-URL: https://build.opensuse.org/request/show/1091284
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=274
2023-06-08 05:34:57 +00:00
Oliver Kurz
3cde411618
Accepting request 1091083 from home:darix:apps
...
- Update to 1.85.0
- Security
- GHSA-26c5-ppr8-f33p / CVE-2023-32682 — Low Severity It may be
possible for a deactivated user to login when using uncommon
configurations. (boo#1212055)
- GHSA-98px-6486-j7qc / CVE-2023-32683 — Low Severity A
discovered oEmbed or image URL can bypass the
url_preview_url_blacklist setting potentially allowing server
side request forgery or bypassing network policies. Impact is
limited to IP addresses allowed by the
url_preview_ip_range_blacklist setting (by default this only
allows public IPs). (boo#1212054)
OBS-URL: https://build.opensuse.org/request/show/1091083
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=273
2023-06-07 07:12:52 +00:00
Oliver Kurz
0429a50e14
Accepting request 1085787 from home:darix:apps
...
- Update to 1.83.0
OBS-URL: https://build.opensuse.org/request/show/1085787
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=272
2023-05-12 10:16:41 +00:00
Oliver Kurz
6d3303d30b
Accepting request 1082745 from home:darix:apps
...
- Update to 1.82.0
OBS-URL: https://build.opensuse.org/request/show/1082745
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=271
2023-04-26 07:29:53 +00:00
Oliver Kurz
4ea0cb960b
Accepting request 1079447 from home:darix:apps
...
- Update to 1.81.0
OBS-URL: https://build.opensuse.org/request/show/1079447
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=270
2023-04-19 14:40:26 +00:00
fe08a4c542
Accepting request 1075693 from home:darix:apps
...
- Update to 1.80.0
OBS-URL: https://build.opensuse.org/request/show/1075693
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=269
2023-03-30 21:02:05 +00:00
11b9c8389e
Accepting request 1066822 from home:darix:apps
...
- lock matrix-synapse until frozendict can enable python 3.11
support
OBS-URL: https://build.opensuse.org/request/show/1066822
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=267
2023-02-20 12:49:04 +00:00
bae58e561a
Accepting request 1065775 from home:darix:apps
...
- Update to 1.77.0
OBS-URL: https://build.opensuse.org/request/show/1065775
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=265
2023-02-14 15:25:26 +00:00
420a6e4e8a
Accepting request 1062351 from home:darix:apps
...
- Update to 1.76.0
OBS-URL: https://build.opensuse.org/request/show/1062351
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=263
2023-01-31 23:20:59 +00:00
98a7a78208
Accepting request 1058976 from home:darix:apps
...
- Update to 1.75.0
OBS-URL: https://build.opensuse.org/request/show/1058976
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=261
2023-01-30 04:22:48 +00:00
Oliver Kurz
11e5078ebe
Accepting request 1043985 from home:darix:apps
...
- Update to 1.74.0
OBS-URL: https://build.opensuse.org/request/show/1043985
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=259
2023-01-03 18:30:05 +00:00
Aleksa Sarai
f3761cffdf
Accepting request 1040680 from home:darix:apps
...
- Update to 1.73.0
OBS-URL: https://build.opensuse.org/request/show/1040680
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=257
2022-12-12 05:14:12 +00:00
Oliver Kurz
231a0ecdd9
Accepting request 1037302 from home:darix:apps
...
- Update to 1.72.0
OBS-URL: https://build.opensuse.org/request/show/1037302
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=255
2022-12-06 09:24:54 +00:00
86780672c2
cleanup unused patch
...
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=253
2022-11-09 13:08:14 +00:00
e002852642
Accepting request 1034840 from home:darix:apps
...
- Update to 1.71.0
OBS-URL: https://build.opensuse.org/request/show/1034840
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=252
2022-11-09 13:03:15 +00:00
Oliver Kurz
f6e0b03101
Accepting request 1031982 from home:darix:apps
...
- Update to 1.70.1
- Bugfixes
- Fix a bug introduced in Synapse 1.70.0rc1 where the access
tokens sent to application services as headers were
malformed. Application services which were obtaining access
tokens from query parameters were not affected. (#14301 )
- Fix room creation being rate limited too aggressively since
Synapse v1.69.0. (#14314 )
OBS-URL: https://build.opensuse.org/request/show/1031982
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=251
2022-10-28 15:04:45 +00:00
Oliver Kurz
2573c1f8bf
Accepting request 1031328 from home:darix:apps
...
- Update to 1.70.0
OBS-URL: https://build.opensuse.org/request/show/1031328
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=250
2022-10-26 12:00:57 +00:00
47d62c35ad
- As 14221.patch is modified to skip the parts we dont need
...
(changelog snippets) remove the url from the spec file.
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=248
2022-10-20 10:44:50 +00:00
Oliver Kurz
b3ceeba0d8
Accepting request 1029777 from home:darix:apps
...
- All the shebang line fixing should skip the vendor directory so
that we do not break the checksum checks in cargo.
- Added https://patch-diff.githubusercontent.com/raw/matrix-org/synapse/pull/14221.patch
Same fix for the cache_memory as for url_preview
- Update to 1.69.0
OBS-URL: https://build.opensuse.org/request/show/1029777
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=247
2022-10-18 16:58:46 +00:00
33dba12b6c
Accepting request 1029708 from home:pgajdos:python
...
- python-six is not required
https://trello.com/c/MO53MocR/143-remove-python3-six
OBS-URL: https://build.opensuse.org/request/show/1029708
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=246
2022-10-18 14:29:18 +00:00
6fa79e08c7
complete series file again
...
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=245
2022-10-17 10:03:19 +00:00
e59782d4dc
Accepting request 1011102 from home:bnavigator:branches:network:messaging:matrix
...
- Replace fragile workaround which is not specification compliant
with 14085-extra-check.patch -- gh#matrix-org/synapse#14085
- Fix python site-packages fdupes
OBS-URL: https://build.opensuse.org/request/show/1011102
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=244
2022-10-17 09:52:14 +00:00
ae120e074d
Accepting request 1010936 from home:darix:apps
...
- Add workaround for poetry >= 1.3.0 (boo#1204312)
Also add the unnormalized name to the Metadata so that the
checks inside synapse work correctly.
OBS-URL: https://build.opensuse.org/request/show/1010936
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=242
2022-10-14 13:40:24 +00:00
803e0508bc
Accepting request 1009205 from home:bnavigator:branches:network:messaging:matrix
...
- Reduce BuildRequires footprint with poetry-core instead of poetry
OBS-URL: https://build.opensuse.org/request/show/1009205
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=241
2022-10-10 09:50:50 +00:00
2b6477e287
Accepting request 1007283 from home:darix:apps
...
1.68.0
OBS-URL: https://build.opensuse.org/request/show/1007283
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=240
2022-09-30 17:52:14 +00:00
Aleksa Sarai
f17deecdbf
Accepting request 1003333 from home:darix:apps
...
- Update to 1.67.0
OBS-URL: https://build.opensuse.org/request/show/1003333
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=238
2022-09-21 00:35:05 +00:00
Oliver Kurz
17459ed3a9
Accepting request 1000524 from home:darix:apps
...
- Update to 1.66.0
OBS-URL: https://build.opensuse.org/request/show/1000524
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=236
2022-09-02 05:43:12 +00:00
2b92eaf598
Accepting request 992239 from home:darix:apps
...
- Update to 1.64.0
OBS-URL: https://build.opensuse.org/request/show/992239
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=234
2022-08-12 14:00:26 +00:00
24ea2591cb
Accepting request 990420 from home:darix:apps
...
- Update to 1.63.1
OBS-URL: https://build.opensuse.org/request/show/990420
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=232
2022-07-20 14:23:03 +00:00
Oliver Kurz
359384acbd
Accepting request 986905 from home:darix:apps
...
- Update to 1.62.0
OBS-URL: https://build.opensuse.org/request/show/986905
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=230
2022-07-14 09:58:53 +00:00
Oliver Kurz
c44471789a
Accepting request 985625 from home:darix:apps
...
- Update to 1.61.1
This patch release fixes a security issue regarding URL previews,
affecting all prior versions of Synapse. Server administrators
are encouraged to update Synapse as soon as possible. We are not
aware of these vulnerabilities being exploited in the wild.
Server administrators who are unable to update Synapse may use
the workarounds described in the linked GitHub Security Advisory
below.
The following issue is fixed in 1.61.1.
GHSA-22p3-qrh9-cx32 / CVE-2022-31052
Synapse instances with the url_preview_enabled homeserver config
option set to true are affected. URL previews of some web pages
can lead to unbounded recursion, causing the request to either
fail, or in some cases crash the running Synapse process.
Requesting URL previews requires authentication. Nevertheless, it
is possible to exploit this maliciously, either by malicious
users on the homeserver, or by remote users sending URLs that a
local user's client may automatically request a URL preview for.
Homeservers with the url_preview_enabled configuration option set
to false (the default) are unaffected. Instances with the
enable_media_repo configuration option set to false are also
unaffected, as this also disables URL preview functionality.
Fixed by fa1308061802ac7b7d20e954ba7372c5ac292333.
- force python 3.10 on TW
OBS-URL: https://build.opensuse.org/request/show/985625
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=228
2022-06-28 16:33:36 +00:00
Oliver Kurz
40ed31c414
Accepting request 982648 from home:darix:apps
...
- Update to 1.61.0
- update the dependencies
- drop PyNaCL dependency as it is not longer needed
- refreshed some of the version dependencies to use poetry.lock
for version numbers instead of the pyproject.toml
OBS-URL: https://build.opensuse.org/request/show/982648
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=226
2022-06-14 16:38:04 +00:00