[PATCH] gnu: synapse: Update to 1.33.2.

OpenSubmitted by Solene Rapenne.
Details
3 participants
  • Ludovic Courtès
  • Michael Rohleder
  • Solene Rapenne
Owner
unassigned
Severity
normal
S
S
Solene Rapenne wrote on 25 May 2021 18:36
(address . guix-patches@gnu.org)
20210525183656.4d41ae04@perso.pw
This fixes the DoS [CVE-2021-29471] and many other improvements

I didn't try it, I don't have a matrix server.

---
gnu/packages/matrix.scm | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)

Toggle diff (30 lines)
diff --git a/gnu/packages/matrix.scm b/gnu/packages/matrix.scm
index 5c2b194d07..0c0fc26705 100644
--- a/gnu/packages/matrix.scm
+++ b/gnu/packages/matrix.scm
@@ -3,6 +3,7 @@
 ;;; Copyright © 2020 Tobias Geerinckx-Rice <me@tobias.gr>
 ;;; Copyright © 2020, 2021 Michael Rohleder <mike@rohleder.de>
 ;;; Copyright © 2020 Giacomo Leidi <goodoldpaul@autistici.org>
+;;; Copyright © 2021 Solene Rapenne <solene@perso.pw>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -86,13 +87,13 @@ an LDAP server.")
 (define-public synapse
   (package
     (name "synapse")
-    (version "1.29.0")
+    (version "1.33.2")
     (source (origin
               (method url-fetch)
               (uri (pypi-uri "matrix-synapse" version))
               (sha256
                (base32
-                "0if2yhpz8psg0661401mvxznldbfhk2j9rhbs25jdaqm9jsv6907"))))
+                "14qalqy5h51qdv88wxj7h7cibxkbwdvk3pn8sj8k19ynbfwn6rpm"))))
     (build-system python-build-system)
     ;; TODO Run tests with ‘PYTHONPATH=. trial3 tests’.
     (propagated-inputs
-- 
2.31.1
M
M
Michael Rohleder wrote on 26 May 2021 16:37
(name . Solene Rapenne)(address . solene@perso.pw)(address . 48655@debbugs.gnu.org)
87im351ryq.fsf@rohleder.de
Hi Solene,

Thank you for the patch!

Solene Rapenne via Guix-patches via <guix-patches@gnu.org> writes:
Toggle quote (4 lines)
> This fixes the DoS [CVE-2021-29471] and many other improvements
>
> I didn't try it, I don't have a matrix server.

synapse > 1.30 needs a newer python-cryptography (I think >=3.4) at
runtime, so I think this version would not run on current guix.
(My homeserver runs guix synapse, but from my channel...)


Regards
mike

--
Life begins where fear ends. - Osho
-----BEGIN PGP SIGNATURE-----

iQFFBAEBCAAvFiEEdV4t5dDVhcUueCgwfHr/vv7yyyUFAmCuXS4RHG1pa2VAcm9o
bGVkZXIuZGUACgkQfHr/vv7yyyViRwf/SOcxlXvUFMDcsTUsJfJUzd9Scp/jw7D2
eggS76/xoDUhOZAoQycx9MPVgMuaE/BRCP1FvHbYeBm7XgKehYRi2VwvC3anDU1z
AqmZcN57nONd6OCdgOdXnWh3i2r2HmyvkyJy2A2LJM9EbHBKLHasUBHBefETuFqy
1yQSvMgjdtOt5mY++S0Z9dMQ+9acggv8fZLFT0Knqw1yz61Fy+sVTEOEFMUWmU19
250P0VK4/uqNgGRUpr5eLwHAXqpRW3UbV9PP/8xoNaiyvP5KDE6TXRAAqSoVKlPy
dJRWLB8Bhi8eDCwc86JyHEIFJlXVZy1wIosDwx1Rc4unSkSs+0nkTA==
=9+OP
-----END PGP SIGNATURE-----

L
L
Ludovic Courtès wrote on 5 Jun 2021 23:30
control message for bug #48655
(address . control@debbugs.gnu.org)
87v96sknir.fsf@gnu.org
tags 48655 + moreinfo
quit
?