debian/changelog - matrix-synapse (debian/1.4.0-1)

changelog @debian/1.4.0-1 — raw · history · blame

matrix-synapse (1.4.0-1) unstable; urgency=medium

  * New upstream release.
  * Bump Twisted requirement.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 04 Oct 2019 10:07:43 +0200

matrix-synapse (1.3.0-1) unstable; urgency=medium

  * New upstream release.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 15 Aug 2019 17:31:05 +0200

matrix-synapse (1.2.1-2) unstable; urgency=medium

  [ Axel Beckert ]
  * Fix the installation process hanging (Closes: #920339).

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 09 Aug 2019 14:14:57 +0200

matrix-synapse (1.2.1-1) unstable; urgency=high

  * New upstream release.
  * Drop an old patch.
  * SECURITY UPDATE:
    - Prevent an attack where a federated server could send redactions
      for arbitrary events in v1 and v2 rooms.
    - Prevent a denial-of-service attack where cycles of redaction events
      would make Synapse spin infinitely.
    - Prevent an attack where users could be joined or parted from public
      rooms without their consent.
    - Fix a vulnerability where a federated server could spoof read
      receipts from users on other servers.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 26 Jul 2019 13:02:23 -0300

matrix-synapse (1.1.0-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.
  * Make most runtime dependencies mandatory.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 18 Jul 2019 20:33:52 -0300

matrix-synapse (1.0.0-2) unstable; urgency=medium

  * Upload to unstable.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 26 Jun 2019 13:09:57 -0500

matrix-synapse (1.0.0-1) experimental; urgency=medium

  * New upstream release.
  * Bump dependencies.
  * Use dh 11 and compat level 11.
  * Refresh patches.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 21 Jun 2019 09:28:10 -0500

matrix-synapse (0.99.5.2-1) experimental; urgency=medium

  * New upstream release.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 06 Jun 2019 15:30:26 +0200

matrix-synapse (0.99.5.1-1) experimental; urgency=medium

  * New upstream release.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 22 May 2019 22:44:28 +0100

matrix-synapse (0.99.3.2-1) experimental; urgency=medium

  * Upload to experimental.
  * New upstream release.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 03 May 2019 22:44:59 +0200

matrix-synapse (0.99.2-6) unstable; urgency=medium

  * Add a NEWS entry on the room format upgrade in 0.99.5.1.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 06 Jun 2019 15:28:41 +0200

matrix-synapse (0.99.2-5) unstable; urgency=high

  * Security updates backported from 0.99.3:
    - Use SystemRandom for token generation
    - Blacklist 0.0.0.0 and :: by default for URL previews

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 03 May 2019 22:26:41 +0200

matrix-synapse (0.99.2-4) unstable; urgency=medium

  [ Antoine Beaupré ]
  * Fix log rotation to be less verbose (Closes: #927057).

 -- Andrej Shadura <andrewsh@debian.org>  Sat, 27 Apr 2019 20:03:23 +0200

matrix-synapse (0.99.2-3) unstable; urgency=medium

  * Make the code querying the location of the key file actually work.
    Closes: #923573.
  * Verify the presence of TLS cert/key files.
  * Make sure warnings are not shown when querying configuration settings.

 -- Andrej Shadura <andrewsh@debian.org>  Sun, 24 Mar 2019 14:02:48 +0100

matrix-synapse (0.99.2-2) unstable; urgency=medium

  * Make sure the key file is owned by the user running synapse
    (Closes: #923573).
  * No longer enable webclient by default (Closes: #923574).
  * Print a warning when the server name has not been set (Closes: #923586).
  * Update NEWS with a note on .well-known vs SRV.

 -- Andrej Shadura <andrewsh@debian.org>  Sat, 16 Mar 2019 16:48:56 +0100

matrix-synapse (0.99.2-1) unstable; urgency=medium

  * New upstream release.
  * Depend on python3-all instead of python3-distutils.
  * Correct the dependency on python3-distutils (Closes: #922838).

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 01 Mar 2019 14:23:57 +0100

matrix-synapse (0.99.1.1-1) unstable; urgency=medium

  * New upstream release.
  * Ship docs, refresh NEWS.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 20 Feb 2019 11:24:24 +0100

matrix-synapse (0.99.0-1) unstable; urgency=medium

  * New upstream release.
  * Recommend python3-bleach and python3-jinja2.
  * Suggest python3-txacme.
  * Update the dependencies.
  * Bump Standards-Version.
  * Update NEWS.

 -- Andrej Shadura <andrewsh@debian.org>  Sat, 09 Feb 2019 15:34:08 +0100

matrix-synapse (0.34.1.1-4) unstable; urgency=high

  * Depend on python3-distutils (Closes: #920274).

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 23 Jan 2019 16:07:50 +0100

matrix-synapse (0.34.1.1-3) unstable; urgency=high

  * Python 3 needs py3dist-overrides.
  * Use Python 3 in the init script (Closes: #919709).
  * Update the dependencies (Closes: #919707).

 -- Andrej Shadura <andrewsh@debian.org>  Sun, 20 Jan 2019 15:05:38 +0100

matrix-synapse (0.34.1.1-2) unstable; urgency=high

  * Fix Python dependencies (Closes: #919450).

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 16 Jan 2019 09:26:37 +0100

matrix-synapse (0.34.1.1-1) unstable; urgency=medium

  * New upstream release:
    - SECURITY UPDATE (CVE-2019-5885).

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 10 Jan 2019 16:24:02 +0100

matrix-synapse (0.34.0-3) unstable; urgency=medium

  * Add Breaks: matrix-synapse-ldap3 (<< 0.1.3-2~).
    Closes: #917558.

 -- Andrej Shadura <andrewsh@debian.org>  Sat, 29 Dec 2018 11:59:09 +0100

matrix-synapse (0.34.0-2) unstable; urgency=medium

  * Bump dependencies to please Synapse.

 -- Andrej Shadura <andrewsh@debian.org>  Sat, 22 Dec 2018 00:01:55 +0100

matrix-synapse (0.34.0-1) unstable; urgency=medium

  * New upstream release.
  * Remove unnecessary patch and the web_client setting.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 21 Dec 2018 13:35:42 +0100

matrix-synapse (0.34.0~rc2-1) unstable; urgency=medium

  * New upstream version 0.34.0~rc2.
  * Use Python 3 (Closes: #897222).
  * debian/watch: Require a dot in the version.
  * Refresh patches.
  * Don’t use dh-systemd package, depend on a newer debhelper instead.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 18 Dec 2018 17:09:27 +0100

matrix-synapse (0.33.9-2) unstable; urgency=medium

  * New upstream release.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 23 Nov 2018 18:39:57 +0100

matrix-synapse (0.33.8-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches, update dependencies.
  * Normalise whitespace.
  * Wrap and sort debian/control.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 02 Nov 2018 12:32:34 +0100

matrix-synapse (0.33.4-1) unstable; urgency=medium

  [ Richard van der Hoff ]
  * Don’t tell users to install packages with pip instead of apt.

  [ Andrej Shadura ]
  * New upstream version.
  * Update the configuration template with new keys.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 12 Sep 2018 15:12:22 +0200

matrix-synapse (0.33.3.1-1) unstable; urgency=high

  * New upstream version.
    - SECURITY UPDATE (CVE-2018-16515):
      Check that signatures on events are valid
      Fix origin handling for pushed transactions
    - Closes: #908044.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 06 Sep 2018 12:00:03 +0200

matrix-synapse (0.33.3-2) unstable; urgency=medium

  [ Richard van der Hoff ]
  * We now require python-twisted 17.1.0 or later.
  * Add recommendations for python-psycopg2 and python-lxml.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 05 Sep 2018 17:57:16 +0200

matrix-synapse (0.33.3-1) unstable; urgency=medium

  * New upstream version.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 22 Aug 2018 16:27:24 +0200

matrix-synapse (0.33.2+dfsg-3) unstable; urgency=medium

  * Remove Recommends for HTTP/2 packages, they break some functionality.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 14 Aug 2018 07:48:14 +0200

matrix-synapse (0.33.2+dfsg-2) unstable; urgency=medium

  * Recommend python-priority and python-h2 for HTTP/2 support.

 -- Andrej Shadura <andrewsh@debian.org>  Mon, 13 Aug 2018 15:19:45 +0200

matrix-synapse (0.33.2+dfsg-1) unstable; urgency=medium

  * New upstream version.
  * Depend on python-netaddr.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 09 Aug 2018 16:42:11 +0200

matrix-synapse (0.33.1+dfsg-1) unstable; urgency=high

  * New upstream version.
  * Security fixes:
    - Fix a potential issue where servers could request events for rooms
      they have not joined. See https://github.com/matrix-org/synapse/issues/3641
    - Fix a potential issue where users could see events in private rooms
      before they joined. See https://github.com/matrix-org/synapse/issues/3642

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 02 Aug 2018 17:10:50 +0200

matrix-synapse (0.33.0+dfsg-1) unstable; urgency=medium

  * New upstream version.
  * Update debian/watch.
  * Refresh patches.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 20 Jul 2018 20:01:00 +0200

matrix-synapse (0.32.2+dfsg-1) unstable; urgency=high

  * New upstream release.
  * Add dependency on python-sortedcontainers.

 -- Andrej Shadura <andrewsh@debian.org>  Sun, 08 Jul 2018 19:44:33 +0200

matrix-synapse (0.31.2+dfsg-1) unstable; urgency=high

  * New upstream release:
    - SECURITY UPDATE:
      Prevent unauthorised users from setting state events in a room
      when there is no m.room.power_levels event in force in the room.
      (Closes: #901549)

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 14 Jun 2018 18:53:36 +0200

matrix-synapse (0.31.1+dfsg-2) unstable; urgency=high

  * Bump dependencies of the binary packages to allow smooth upgrades.

 -- Andrej Shadura <andrewsh@debian.org>  Mon, 11 Jun 2018 08:46:06 +0200

matrix-synapse (0.31.1+dfsg-1) unstable; urgency=high

  * New upstream release:
    - SECURITY UPDATE:
      This release fixes a security bug in the get_missing_events federation
      API where event visibility rules were not applied correctly.
      We are not aware of it being actively exploited but please upgrade ASAP.

 -- Andrej Shadura <andrewsh@debian.org>  Sun, 10 Jun 2018 22:45:05 +0200

matrix-synapse (0.31.0+dfsg-2) unstable; urgency=medium

  * Remove no longer relevant patches.
  * Add French debconf translation (Closes: #861924)
    by Jean-Pierre Giraud.
  * Add Dutch translation of debconf messages (Closes: #862208)
    by Frans Spiesschaert.
  * Add Brazilian Portuguese debconf templates translation (Closes: #891166)
    by Adriano Rafael Gomes.
  * Add Russian translation of debconf template (Closes: #883207)
    by Lev Lamberov.
  * Update the copyrights.
  * Refresh copyrights in the PO template and POs.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 07 Jun 2018 09:10:23 +0200

matrix-synapse (0.31.0+dfsg-1) unstable; urgency=medium

  [ Richard van der Hoff ]
  * Refresh 0004-webclient-instructions.patch
  * Drop dependency on ujson, add dependencies on attr and
    prometheus-client.

  [ Andrej Shadura ]
  * New upstream release.
  * Add the missing six dependency.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 06 Jun 2018 20:42:37 +0200

matrix-synapse (0.30.0+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 25 May 2018 09:46:38 +0200

matrix-synapse (0.29.1+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.
  * Update Vcs-*.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 18 May 2018 17:31:24 +0200

matrix-synapse (0.28.1+dfsg-1) unstable; urgency=high

  * New upstream release:
    - SECURITY UPDATE:
      Clamp the allowed values of event depth received over federation to
      be [0, 2**63 - 1]. This mitigates an attack where malicious events
      injected with depth = 2**63 - 1 render rooms unusable.
  * Prevent installing with python-pymacaroons-nacl or python-nacl (<< 1.1.0).

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 02 May 2018 12:02:15 +0200

matrix-synapse (0.28.0+dfsg-2) unstable; urgency=medium

  * Prefer python-nacl (>= 1.1.0) and python-pymacaroons.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 01 May 2018 14:15:54 +0200

matrix-synapse (0.28.0+dfsg-1) unstable; urgency=medium

  * New upstream version.
  * Refresh patches.
  * Enable systemd journal logging by default.

 -- Andrej Shadura <andrewsh@debian.org>  Mon, 30 Apr 2018 14:12:04 +0200

matrix-synapse (0.27.2+dfsg-1) unstable; urgency=medium

  [ Andrej Shadura ]
  * New upstream version.
  * Add python-phonenumbers dependency.
  * Drop a patch to not depend on python-phonenumbers.
  * Refresh patches.
  * Make the package team-maintained.

  [ Richard van der Hoff ]
  * Remove level for file log handler from the default log.yaml.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 27 Mar 2018 17:39:49 +0200

matrix-synapse (0.24.0+dfsg-1) unstable; urgency=medium

  * New upstream version.
  * Remove an extra oversionmangle from debian/watch.
  * Drop a patch applied upstream.
  * Update debian/copyright.
  * Add a patch to temporarily avoid phonenumbers dependency.

 -- Andrew Shadura <andrewsh@debian.org>  Tue, 24 Oct 2017 15:25:33 +0100

matrix-synapse (0.19.2+dfsg-6) unstable; urgency=medium

  [ Simó Albert i Beltran ]
  * Use set -e instead of passes -e to hte shell on the #! at debian/postinst

  [ Rui Branco ]
  * Add Portuguese translation for debconf messages.

  [ Andrew Shadura ]
  * Temporarily add an optional dependency on python-pymacaroons-pynacl
    for python-nacl << 1.1.0.

 -- Andrew Shadura <andrewsh@debian.org>  Mon, 27 Mar 2017 11:52:05 +0200

matrix-synapse (0.19.2+dfsg-5) unstable; urgency=medium

  [ Simó Albert i Beltran ]
  * When purging remove configuration files created by debian/postinst
    (Closes: #857428)

  [ Helge Kreutzmann ]
  * Add initial German debconf translation. (Closes: #857526)

  [ Rahul De ]
  * Fail silently if server name is not configured (Closes: #857619)

 -- Andrew Shadura <andrewsh@debian.org>  Sat, 18 Mar 2017 11:14:06 +0100

matrix-synapse (0.19.2+dfsg-4) unstable; urgency=medium

  * Add bcrypt and pymacaroons to pydist-overrides so that the runtime
    dependencies are picked up automatically.

 -- Andrew Shadura <andrewsh@debian.org>  Fri, 10 Mar 2017 12:04:52 +0100

matrix-synapse (0.19.2+dfsg-3) unstable; urgency=medium

  * Add missing copyrights for jwt.py and saml2.py
    (Thanks to Andreas Henriksson).

 -- Andrew Shadura <andrewsh@debian.org>  Mon, 06 Mar 2017 20:53:50 +0100

matrix-synapse (0.19.2+dfsg-2) unstable; urgency=medium

  * Move to Section: net.
  * Add Vcs-*.
  * Add Homepage.
  * Use oversionmangle and dversionmangle in debian/watch.
  * Move Apache-2.0 license text into a separate paragraph.

 -- Andrew Shadura <andrewsh@debian.org>  Tue, 21 Feb 2017 18:32:09 +0100

matrix-synapse (0.19.2+dfsg-1) unstable; urgency=medium

  * Don't install upstream's minified jquery, depend on libjs-jquery.
  * Include the source code for jquery-2.1.3.min.js
  * Don't load reCAPTCHA.
  * Update debian/copyright.
  * Set repacksuffix, remove debian uupdate.
  * Actually add lsb-base as a dependency.

 -- Andrew Shadura <andrewsh@debian.org>  Tue, 21 Feb 2017 18:01:45 +0100

matrix-synapse (0.19.2-1) unstable; urgency=medium

  [ Sunil Mohan Adapa ]
  * Bump standards version to 3.9.8.
  * Don't ignore errors in debian/config.
  * Internationalise strings in the template file.
  * Add lsb-base as a dependency.
  * Update debconf questions.
  * Add manpages for all binaries.

  [ Andrew Shadura ]
  * New upstream version.
  * Update debian/copyright file.

 -- Andrew Shadura <andrewsh@debian.org>  Tue, 21 Feb 2017 16:14:52 +0100

matrix-synapse (0.19.1-1) unstable; urgency=medium

  [ Erik Johnston ]
  * Initial packaging for the upstream version 0.19.1.

  [ Andrew Shadura ]
  * First upload to Debian (Closes: #830601).

 -- Andrew Shadura <andrewsh@debian.org>  Tue, 21 Feb 2017 15:39:04 +0100
Tree @debian/1.4.0-1 (Download .tar.gz)

changelog @debian/1.4.0-1 — raw · history · blame
