Commit Graph

158 Commits

Author SHA256 Message Date
63706e9c6c Accepting request 1123775 from home:dimstar:Factory
Fix build with RPM 4.19: unnumbered patches are no longer supported.

OBS-URL: https://build.opensuse.org/request/show/1123775
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=300
2023-11-07 10:27:05 +00:00
e566aac147 add missing bugnumber
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=298
2023-11-02 11:33:08 +00:00
3d5bf2cc09 Accepting request 1121496 from home:darix:apps
- Update to 1.95.1
  - Security:
    - GHSA-mp92-3jfm-3575 / CVE-2023-43796 — Moderate Severity
      Cached device information of remote users can be queried from
      Synapse. This can be used to enumerate the remote users known
      to a homeserver.

OBS-URL: https://build.opensuse.org/request/show/1121496
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=296
2023-10-31 20:07:10 +00:00
2eb079666a Accepting request 1120123 from home:darix:apps
- Update to 1.95.0

OBS-URL: https://build.opensuse.org/request/show/1120123
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=294
2023-10-24 20:00:44 +00:00
33f961dbab Accepting request 1116888 from home:darix:apps
- Update to 1.94.0 (boo#1216126 CVE-2023-45129)
  GHSA-5chr-wjw5-3gq4 / CVE-2023-45129 — Moderate Severity
  A malicious server ACL event can impact performance temporarily
  or permanently leading to a persistent denial of service.
  Homeservers running on a closed federation (which presumably do
  not need to use server ACLs) are not affected.

OBS-URL: https://build.opensuse.org/request/show/1116888
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=292
2023-10-11 10:21:26 +00:00
ff899420ed Accepting request 1116682 from home:darix:apps
- Update to 1.94.0

OBS-URL: https://build.opensuse.org/request/show/1116682
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=290
2023-10-10 14:02:02 +00:00
fd426452c9 Accepting request 1113707 from home:darix:apps
- Update to 1.93.0

OBS-URL: https://build.opensuse.org/request/show/1113707
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=288
2023-09-26 17:40:26 +00:00
3548a07d65 Accepting request 1113560 from home:darix:apps
- Update to 1.92.3
  This release does not affect openSUSE as we do not use the intree
  libwebp
  Upstream changes:
  This is again a security update targeted at mitigating
  CVE-2023-4863. It turns out that libwebp is bundled statically in
  Pillow wheels so we need to update this dependency instead of
  libwebp package at the OS level.
  Unlike what was advertised in 1.92.2 changelog this release also
  impacts PyPI wheels and Debian packages from matrix.org.
  We encourage admins to upgrade as soon as possible.
  Internal Changes
  - Pillow 10.0.1 is now mandatory because of libwebp
    CVE-2023-4863, since Pillow provides libwebp in the wheels.
    (#16347)
- bump all the dependencies which are not available in tumbleweed.

- Update to 1.92.2
  Only fix in this is actually changing the upstream docker
  configuration to mitigate the webp security bug. Does not affect
  our package.

- Update to 1.92.1
  - Bugfixes
    - Revert MSC3861 introspection cache, admin impersonation and
      account lock. (#16258)
  - Internal Changes
    - Fix incorrect docstring for Ratelimiter. (#16255)
    - Update the release script to work on macOS. (#16266)
    - Stop building Ubuntu Kinetic since it is EOL and repos seem

OBS-URL: https://build.opensuse.org/request/show/1113560
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=287
2023-09-25 23:13:20 +00:00
732a56b96c Accepting request 1109344 from home:darix:apps
- Update to 1.91.2

OBS-URL: https://build.opensuse.org/request/show/1109344
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=285
2023-09-06 20:50:53 +00:00
Oliver Kurz
89f349ba3d Accepting request 1104037 from home:darix:apps
- Update to 1.90.0

OBS-URL: https://build.opensuse.org/request/show/1104037
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=283
2023-08-28 12:08:40 +00:00
c926da9e4c OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=281 2023-07-27 16:29:33 +00:00
3500854110 OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=280 2023-07-26 20:57:39 +00:00
ceb1123ef0 Accepting request 1100849 from home:dirkmueller:Factory
- switch to _multibuild

OBS-URL: https://build.opensuse.org/request/show/1100849
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=279
2023-07-26 12:45:04 +00:00
27fc6e051e Accepting request 1099302 from home:darix:apps
- Update to 1.88.0

OBS-URL: https://build.opensuse.org/request/show/1099302
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=278
2023-07-20 12:11:12 +00:00
Oliver Kurz
4a890fecd8 Accepting request 1097605 from home:darix:apps
- Update to 1.87.0

OBS-URL: https://build.opensuse.org/request/show/1097605
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=277
2023-07-13 17:42:37 +00:00
Aleksa Sarai
54eae36595 Accepting request 1091721 from home:darix:apps
- Update to 1.85.2
  - Bugfixes
    - Fix regression where using TLS for HTTP replication between
      workers did not work. Introduced in v1.85.0. (#15746)

OBS-URL: https://build.opensuse.org/request/show/1091721
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=275
2023-06-21 06:17:28 +00:00
Aleksa Sarai
291f685119 Accepting request 1091284 from home:darix:apps
- Update to 1.85.1
  Note: this release only fixes a bug that stopped some deployments
  from upgrading to v1.85.0. There is no need to upgrade to v1.85.1
  if successfully running v1.85.0.
  - Bugfixes
    - Fix bug in schema delta that broke upgrades for some
      deployments. Introduced in v1.85.0. (#15738, #15739)

OBS-URL: https://build.opensuse.org/request/show/1091284
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=274
2023-06-08 05:34:57 +00:00
Oliver Kurz
3cde411618 Accepting request 1091083 from home:darix:apps
- Update to 1.85.0
  - Security
    - GHSA-26c5-ppr8-f33p / CVE-2023-32682 — Low Severity It may be
      possible for a deactivated user to login when using uncommon
      configurations. (boo#1212055)
    - GHSA-98px-6486-j7qc / CVE-2023-32683 — Low Severity A
      discovered oEmbed or image URL can bypass the
      url_preview_url_blacklist setting potentially allowing server
      side request forgery or bypassing network policies. Impact is
      limited to IP addresses allowed by the
      url_preview_ip_range_blacklist setting (by default this only
      allows public IPs). (boo#1212054)

OBS-URL: https://build.opensuse.org/request/show/1091083
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=273
2023-06-07 07:12:52 +00:00
Oliver Kurz
0429a50e14 Accepting request 1085787 from home:darix:apps
- Update to 1.83.0

OBS-URL: https://build.opensuse.org/request/show/1085787
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=272
2023-05-12 10:16:41 +00:00
Oliver Kurz
6d3303d30b Accepting request 1082745 from home:darix:apps
- Update to 1.82.0

OBS-URL: https://build.opensuse.org/request/show/1082745
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=271
2023-04-26 07:29:53 +00:00
Oliver Kurz
4ea0cb960b Accepting request 1079447 from home:darix:apps
- Update to 1.81.0

OBS-URL: https://build.opensuse.org/request/show/1079447
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=270
2023-04-19 14:40:26 +00:00
fe08a4c542 Accepting request 1075693 from home:darix:apps
- Update to 1.80.0

OBS-URL: https://build.opensuse.org/request/show/1075693
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=269
2023-03-30 21:02:05 +00:00
11b9c8389e Accepting request 1066822 from home:darix:apps
- lock matrix-synapse until frozendict can enable python 3.11
  support

OBS-URL: https://build.opensuse.org/request/show/1066822
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=267
2023-02-20 12:49:04 +00:00
bae58e561a Accepting request 1065775 from home:darix:apps
- Update to 1.77.0

OBS-URL: https://build.opensuse.org/request/show/1065775
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=265
2023-02-14 15:25:26 +00:00
420a6e4e8a Accepting request 1062351 from home:darix:apps
- Update to 1.76.0

OBS-URL: https://build.opensuse.org/request/show/1062351
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=263
2023-01-31 23:20:59 +00:00
98a7a78208 Accepting request 1058976 from home:darix:apps
- Update to 1.75.0

OBS-URL: https://build.opensuse.org/request/show/1058976
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=261
2023-01-30 04:22:48 +00:00
Oliver Kurz
11e5078ebe Accepting request 1043985 from home:darix:apps
- Update to 1.74.0

OBS-URL: https://build.opensuse.org/request/show/1043985
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=259
2023-01-03 18:30:05 +00:00
Aleksa Sarai
f3761cffdf Accepting request 1040680 from home:darix:apps
- Update to 1.73.0

OBS-URL: https://build.opensuse.org/request/show/1040680
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=257
2022-12-12 05:14:12 +00:00
Oliver Kurz
231a0ecdd9 Accepting request 1037302 from home:darix:apps
- Update to 1.72.0

OBS-URL: https://build.opensuse.org/request/show/1037302
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=255
2022-12-06 09:24:54 +00:00
86780672c2 cleanup unused patch
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=253
2022-11-09 13:08:14 +00:00
e002852642 Accepting request 1034840 from home:darix:apps
- Update to 1.71.0

OBS-URL: https://build.opensuse.org/request/show/1034840
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=252
2022-11-09 13:03:15 +00:00
Oliver Kurz
f6e0b03101 Accepting request 1031982 from home:darix:apps
- Update to 1.70.1
  - Bugfixes
    - Fix a bug introduced in Synapse 1.70.0rc1 where the access
      tokens sent to application services as headers were
      malformed. Application services which were obtaining access
      tokens from query parameters were not affected. (#14301)
    - Fix room creation being rate limited too aggressively since
      Synapse v1.69.0. (#14314)

OBS-URL: https://build.opensuse.org/request/show/1031982
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=251
2022-10-28 15:04:45 +00:00
Oliver Kurz
2573c1f8bf Accepting request 1031328 from home:darix:apps
- Update to 1.70.0

OBS-URL: https://build.opensuse.org/request/show/1031328
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=250
2022-10-26 12:00:57 +00:00
47d62c35ad - As 14221.patch is modified to skip the parts we dont need
(changelog snippets) remove the url from the spec file.

OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=248
2022-10-20 10:44:50 +00:00
Oliver Kurz
b3ceeba0d8 Accepting request 1029777 from home:darix:apps
- All the shebang line fixing should skip the vendor directory so
  that we do not break the checksum checks in cargo.

- Added https://patch-diff.githubusercontent.com/raw/matrix-org/synapse/pull/14221.patch 
  Same fix for the cache_memory as for url_preview

- Update to 1.69.0

OBS-URL: https://build.opensuse.org/request/show/1029777
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=247
2022-10-18 16:58:46 +00:00
33dba12b6c Accepting request 1029708 from home:pgajdos:python
- python-six is not required
  https://trello.com/c/MO53MocR/143-remove-python3-six

OBS-URL: https://build.opensuse.org/request/show/1029708
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=246
2022-10-18 14:29:18 +00:00
6fa79e08c7 complete series file again
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=245
2022-10-17 10:03:19 +00:00
e59782d4dc Accepting request 1011102 from home:bnavigator:branches:network:messaging:matrix
- Replace fragile workaround which is not specification compliant
  with 14085-extra-check.patch -- gh#matrix-org/synapse#14085
- Fix python site-packages fdupes

OBS-URL: https://build.opensuse.org/request/show/1011102
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=244
2022-10-17 09:52:14 +00:00
ae120e074d Accepting request 1010936 from home:darix:apps
- Add workaround for poetry >= 1.3.0 (boo#1204312)
  Also add the unnormalized name to the Metadata so that the
  checks inside synapse work correctly.

OBS-URL: https://build.opensuse.org/request/show/1010936
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=242
2022-10-14 13:40:24 +00:00
803e0508bc Accepting request 1009205 from home:bnavigator:branches:network:messaging:matrix
- Reduce BuildRequires footprint with poetry-core instead of poetry

OBS-URL: https://build.opensuse.org/request/show/1009205
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=241
2022-10-10 09:50:50 +00:00
2b6477e287 Accepting request 1007283 from home:darix:apps
1.68.0

OBS-URL: https://build.opensuse.org/request/show/1007283
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=240
2022-09-30 17:52:14 +00:00
Aleksa Sarai
f17deecdbf Accepting request 1003333 from home:darix:apps
- Update to 1.67.0

OBS-URL: https://build.opensuse.org/request/show/1003333
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=238
2022-09-21 00:35:05 +00:00
Oliver Kurz
17459ed3a9 Accepting request 1000524 from home:darix:apps
- Update to 1.66.0

OBS-URL: https://build.opensuse.org/request/show/1000524
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=236
2022-09-02 05:43:12 +00:00
2b92eaf598 Accepting request 992239 from home:darix:apps
- Update to 1.64.0

OBS-URL: https://build.opensuse.org/request/show/992239
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=234
2022-08-12 14:00:26 +00:00
24ea2591cb Accepting request 990420 from home:darix:apps
- Update to 1.63.1

OBS-URL: https://build.opensuse.org/request/show/990420
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=232
2022-07-20 14:23:03 +00:00
Oliver Kurz
359384acbd Accepting request 986905 from home:darix:apps
- Update to 1.62.0

OBS-URL: https://build.opensuse.org/request/show/986905
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=230
2022-07-14 09:58:53 +00:00
Oliver Kurz
c44471789a Accepting request 985625 from home:darix:apps
- Update to 1.61.1
  This patch release fixes a security issue regarding URL previews,
  affecting all prior versions of Synapse. Server administrators
  are encouraged to update Synapse as soon as possible. We are not
  aware of these vulnerabilities being exploited in the wild.
  Server administrators who are unable to update Synapse may use
  the workarounds described in the linked GitHub Security Advisory
  below.
  The following issue is fixed in 1.61.1.
  GHSA-22p3-qrh9-cx32 / CVE-2022-31052
  Synapse instances with the url_preview_enabled homeserver config
  option set to true are affected. URL previews of some web pages
  can lead to unbounded recursion, causing the request to either
  fail, or in some cases crash the running Synapse process.
  Requesting URL previews requires authentication. Nevertheless, it
  is possible to exploit this maliciously, either by malicious
  users on the homeserver, or by remote users sending URLs that a
  local user's client may automatically request a URL preview for.
  Homeservers with the url_preview_enabled configuration option set
  to false (the default) are unaffected. Instances with the
  enable_media_repo configuration option set to false are also
  unaffected, as this also disables URL preview functionality.
  Fixed by fa1308061802ac7b7d20e954ba7372c5ac292333.

- force python 3.10 on TW

OBS-URL: https://build.opensuse.org/request/show/985625
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=228
2022-06-28 16:33:36 +00:00
Oliver Kurz
40ed31c414 Accepting request 982648 from home:darix:apps
- Update to 1.61.0
- update the dependencies
  - drop PyNaCL dependency as it is not longer needed
  - refreshed some of the version dependencies to use poetry.lock
    for version numbers instead of the pyproject.toml

OBS-URL: https://build.opensuse.org/request/show/982648
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=226
2022-06-14 16:38:04 +00:00
86cb2098e5 fix date
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=224
2022-05-31 16:57:25 +00:00
6ac575131f Accepting request 980131 from home:darix:apps
- Update to 1.60.0

OBS-URL: https://build.opensuse.org/request/show/980131
OBS-URL: https://build.opensuse.org/package/show/network:messaging:matrix/matrix-synapse?expand=0&rev=223
2022-05-31 16:55:06 +00:00