[Bug 244279] net-im/py-matrix-synapse: Update to 1.11.0

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Apr 11 18:25:52 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244279

Sascha Biberhofer <ports at skyforge.at> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #212130|0                           |1
        is obsolete|                            |
 Attachment #213297|                            |maintainer-approval+
              Flags|                            |

--- Comment #7 from Sascha Biberhofer <ports at skyforge.at> ---
Created attachment 213297
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=213297&action=edit
net-im/py-matrix-synapse: Update to 1.12.3

After skipping on 1.12.0 due to problems in postgres-only configurations (see
[1]), we've now reached 1.12.3. This version has worked fine on my server for
the last few days and also works with the py-twisted version currently
discussed in [2]. 

It should be noted that py-matrix-synapse is currently vulnerable to the
request smuggling CVE contained in the old py-twisted version, as was mentioned
in the release noted of synapse in [3]. 

This update is of course still blocked by the missing JSON1 option in sqlite,
which has since been incorporated into [4].

[1] https://github.com/matrix-org/synapse/issues/7127
[2] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=245252
[3] https://github.com/matrix-org/synapse/releases/tag/v1.12.0
[4] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=243602

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-python mailing list