matrix-synapse (0.99.2-5~bpo9+1) stretch-backports; urgency=high * Rebuild for stretch-backports. -- Andrej Shadura Mon, 13 May 2019 14:24:48 +0200 matrix-synapse (0.99.2-5) unstable; urgency=high * Security updates backported from 0.99.3: - Use SystemRandom for token generation - Blacklist 0.0.0.0 and :: by default for URL previews -- Andrej Shadura Fri, 03 May 2019 22:26:41 +0200 matrix-synapse (0.99.2-4) unstable; urgency=medium [ Antoine Beaupré ] * Fix log rotation to be less verbose (Closes: #927057). -- Andrej Shadura Sat, 27 Apr 2019 20:03:23 +0200 matrix-synapse (0.99.2-3) unstable; urgency=medium * Make the code querying the location of the key file actually work. Closes: #923573. * Verify the presence of TLS cert/key files. * Make sure warnings are not shown when querying configuration settings. -- Andrej Shadura Sun, 24 Mar 2019 14:02:48 +0100 matrix-synapse (0.99.2-2) unstable; urgency=medium * Make sure the key file is owned by the user running synapse (Closes: #923573). * No longer enable webclient by default (Closes: #923574). * Print a warning when the server name has not been set (Closes: #923586). * Update NEWS with a note on .well-known vs SRV. -- Andrej Shadura Sat, 16 Mar 2019 16:48:56 +0100 matrix-synapse (0.99.2-1~bpo9+2) stretch-backports; urgency=medium * Make sure the key file is owned by the user running synapse (Closes: #923573). * Verify the presence of TLS cert/key files. * Make sure warnings are not shown when querying configuration settings. * No longer enable webclient by default (Closes: #923574). * Print a warning when the server name has not been set (Closes: #923586). * Update NEWS with a note on .well-known vs SRV. -- Andrej Shadura Tue, 26 Mar 2019 17:25:50 +0100 matrix-synapse (0.99.2-1~bpo9+1) stretch-backports; urgency=medium * Rebuild for stretch-backports. * Make sure the key file is owned by the user running synapse (Closes: #923573). -- Andrej Shadura Sat, 16 Mar 2019 16:00:09 +0100 matrix-synapse (0.99.2-1) unstable; urgency=medium * New upstream release. * Depend on python3-all instead of python3-distutils. * Correct the dependency on python3-distutils (Closes: #922838). -- Andrej Shadura Fri, 01 Mar 2019 14:23:57 +0100 matrix-synapse (0.99.1.1-1) unstable; urgency=medium * New upstream release. * Ship docs, refresh NEWS. -- Andrej Shadura Wed, 20 Feb 2019 11:24:24 +0100 matrix-synapse (0.99.0-1~bpo9+3) stretch-backports; urgency=medium * Correct the dependency on python3-distutils (Closes: #922838). This module was split into python3-distutils in 3.6.4~rc1-2; before that version of libpython3-stdlib it was part of the standard library. -- Andrej Shadura Thu, 21 Feb 2019 13:30:04 +0100 matrix-synapse (0.99.0-1~bpo9+2) stretch-backports; urgency=medium * Depend on python3-all instead of python3-distutils (fixes FTBFS in the backports). -- Andrej Shadura Wed, 20 Feb 2019 14:56:30 +0100 matrix-synapse (0.99.0-1~bpo9+1) stretch-backports; urgency=medium * Rebuild for stretch-backports. -- Andrej Shadura Wed, 20 Feb 2019 11:10:05 +0100 matrix-synapse (0.99.0-1) unstable; urgency=medium * New upstream release. * Recommend python3-bleach and python3-jinja2. * Suggest python3-txacme. * Update the dependencies. * Bump Standards-Version. * Update NEWS. -- Andrej Shadura Sat, 09 Feb 2019 15:34:08 +0100 matrix-synapse (0.34.1.1-4) unstable; urgency=high * Depend on python3-distutils (Closes: #920274). -- Andrej Shadura Wed, 23 Jan 2019 16:07:50 +0100 matrix-synapse (0.34.1.1-3~bpo9+2) stretch-backports; urgency=medium * Depend on python3-distutils (Closes: #920274). -- Andrej Shadura Wed, 23 Jan 2019 16:08:57 +0100 matrix-synapse (0.34.1.1-3~bpo9+1) stretch-backports; urgency=medium * Rebuild for stretch-backports. -- Andrej Shadura Sun, 20 Jan 2019 15:30:31 +0100 matrix-synapse (0.34.1.1-3) unstable; urgency=high * Python 3 needs py3dist-overrides. * Use Python 3 in the init script (Closes: #919709). * Update the dependencies (Closes: #919707). -- Andrej Shadura Sun, 20 Jan 2019 15:05:38 +0100 matrix-synapse (0.34.1.1-2~bpo9+1) stretch-backports; urgency=high * Rebuild for stretch-backports. -- Andrej Shadura Thu, 17 Jan 2019 10:56:14 +0100 matrix-synapse (0.34.1.1-2) unstable; urgency=high * Fix Python dependencies (Closes: #919450). -- Andrej Shadura Wed, 16 Jan 2019 09:26:37 +0100 matrix-synapse (0.34.1.1-1) unstable; urgency=medium * New upstream release: - SECURITY UPDATE (CVE-2019-5885). -- Andrej Shadura Thu, 10 Jan 2019 16:24:02 +0100 matrix-synapse (0.34.0-3~bpo9+2) stretch-backports; urgency=medium * SECURITY UPDATE: CVE-2019-5885. -- Andrej Shadura Thu, 10 Jan 2019 16:47:49 +0100 matrix-synapse (0.34.0-3~bpo9+1) stretch-backports; urgency=medium * Rebuild for stretch-backports. * Undo the switch to Python 3 due to missing dependencies. -- Andrej Shadura Thu, 10 Jan 2019 16:41:01 +0100 matrix-synapse (0.34.0-3) unstable; urgency=medium * Add Breaks: matrix-synapse-ldap3 (<< 0.1.3-2~). Closes: #917558. -- Andrej Shadura Sat, 29 Dec 2018 11:59:09 +0100 matrix-synapse (0.34.0-2) unstable; urgency=medium * Bump dependencies to please Synapse. -- Andrej Shadura Sat, 22 Dec 2018 00:01:55 +0100 matrix-synapse (0.34.0-1) unstable; urgency=medium * New upstream release. * Remove unnecessary patch and the web_client setting. -- Andrej Shadura Fri, 21 Dec 2018 13:35:42 +0100 matrix-synapse (0.34.0~rc2-1) unstable; urgency=medium * New upstream version 0.34.0~rc2. * Use Python 3 (Closes: #897222). * debian/watch: Require a dot in the version. * Refresh patches. * Don’t use dh-systemd package, depend on a newer debhelper instead. -- Andrej Shadura Tue, 18 Dec 2018 17:09:27 +0100 matrix-synapse (0.33.9-2~bpo9+1) stretch-backports; urgency=medium * Rebuild for stretch-backports. -- Andrej Shadura Tue, 18 Dec 2018 16:54:29 +0100 matrix-synapse (0.33.9-2) unstable; urgency=medium * New upstream release. -- Andrej Shadura Fri, 23 Nov 2018 18:39:57 +0100 matrix-synapse (0.33.8-1) unstable; urgency=medium * New upstream release. * Refresh patches, update dependencies. * Normalise whitespace. * Wrap and sort debian/control. -- Andrej Shadura Fri, 02 Nov 2018 12:32:34 +0100 matrix-synapse (0.33.4-1~bpo9+1) stretch-backports; urgency=medium * Rebuild for stretch-backports. -- Andrej Shadura Mon, 17 Sep 2018 10:06:19 +0200 matrix-synapse (0.33.4-1) unstable; urgency=medium [ Richard van der Hoff ] * Don’t tell users to install packages with pip instead of apt. [ Andrej Shadura ] * New upstream version. * Update the configuration template with new keys. -- Andrej Shadura Wed, 12 Sep 2018 15:12:22 +0200 matrix-synapse (0.33.3.1-1) unstable; urgency=high * New upstream version. - SECURITY UPDATE (CVE-2018-16515): Check that signatures on events are valid Fix origin handling for pushed transactions - Closes: #908044. -- Andrej Shadura Thu, 06 Sep 2018 12:00:03 +0200 matrix-synapse (0.33.3-2) unstable; urgency=medium [ Richard van der Hoff ] * We now require python-twisted 17.1.0 or later. * Add recommendations for python-psycopg2 and python-lxml. -- Andrej Shadura Wed, 05 Sep 2018 17:57:16 +0200 matrix-synapse (0.33.3-1) unstable; urgency=medium * New upstream version. -- Andrej Shadura Wed, 22 Aug 2018 16:27:24 +0200 matrix-synapse (0.33.2+dfsg-3) unstable; urgency=medium * Remove Recommends for HTTP/2 packages, they break some functionality. -- Andrej Shadura Tue, 14 Aug 2018 07:48:14 +0200 matrix-synapse (0.33.2+dfsg-2) unstable; urgency=medium * Recommend python-priority and python-h2 for HTTP/2 support. -- Andrej Shadura Mon, 13 Aug 2018 15:19:45 +0200 matrix-synapse (0.33.2+dfsg-1) unstable; urgency=medium * New upstream version. * Depend on python-netaddr. -- Andrej Shadura Thu, 09 Aug 2018 16:42:11 +0200 matrix-synapse (0.33.1+dfsg-1) unstable; urgency=high * New upstream version. * Security fixes: - Fix a potential issue where servers could request events for rooms they have not joined. See https://github.com/matrix-org/synapse/issues/3641 - Fix a potential issue where users could see events in private rooms before they joined. See https://github.com/matrix-org/synapse/issues/3642 -- Andrej Shadura Thu, 02 Aug 2018 17:10:50 +0200 matrix-synapse (0.33.0+dfsg-1) unstable; urgency=medium * New upstream version. * Update debian/watch. * Refresh patches. -- Andrej Shadura Fri, 20 Jul 2018 20:01:00 +0200 matrix-synapse (0.32.2+dfsg-1) unstable; urgency=high * New upstream release. * Add dependency on python-sortedcontainers. -- Andrej Shadura Sun, 08 Jul 2018 19:44:33 +0200 matrix-synapse (0.31.2+dfsg-1) unstable; urgency=high * New upstream release: - SECURITY UPDATE: Prevent unauthorised users from setting state events in a room when there is no m.room.power_levels event in force in the room. (Closes: #901549) -- Andrej Shadura Thu, 14 Jun 2018 18:53:36 +0200 matrix-synapse (0.31.1+dfsg-2) unstable; urgency=high * Bump dependencies of the binary packages to allow smooth upgrades. -- Andrej Shadura Mon, 11 Jun 2018 08:46:06 +0200 matrix-synapse (0.31.1+dfsg-1) unstable; urgency=high * New upstream release: - SECURITY UPDATE: This release fixes a security bug in the get_missing_events federation API where event visibility rules were not applied correctly. We are not aware of it being actively exploited but please upgrade ASAP. -- Andrej Shadura Sun, 10 Jun 2018 22:45:05 +0200 matrix-synapse (0.31.0+dfsg-2) unstable; urgency=medium * Remove no longer relevant patches. * Add French debconf translation (Closes: #861924) by Jean-Pierre Giraud. * Add Dutch translation of debconf messages (Closes: #862208) by Frans Spiesschaert. * Add Brazilian Portuguese debconf templates translation (Closes: #891166) by Adriano Rafael Gomes. * Add Russian translation of debconf template (Closes: #883207) by Lev Lamberov. * Update the copyrights. * Refresh copyrights in the PO template and POs. -- Andrej Shadura Thu, 07 Jun 2018 09:10:23 +0200 matrix-synapse (0.31.0+dfsg-1) unstable; urgency=medium [ Richard van der Hoff ] * Refresh 0004-webclient-instructions.patch * Drop dependency on ujson, add dependencies on attr and prometheus-client. [ Andrej Shadura ] * New upstream release. * Add the missing six dependency. -- Andrej Shadura Wed, 06 Jun 2018 20:42:37 +0200 matrix-synapse (0.30.0+dfsg-1) unstable; urgency=medium * New upstream release. -- Andrej Shadura Fri, 25 May 2018 09:46:38 +0200 matrix-synapse (0.29.1+dfsg-1) unstable; urgency=medium * New upstream release. * Refresh patches. * Update Vcs-*. -- Andrej Shadura Fri, 18 May 2018 17:31:24 +0200 matrix-synapse (0.28.1+dfsg-1) unstable; urgency=high * New upstream release: - SECURITY UPDATE: Clamp the allowed values of event depth received over federation to be [0, 2**63 - 1]. This mitigates an attack where malicious events injected with depth = 2**63 - 1 render rooms unusable. * Prevent installing with python-pymacaroons-nacl or python-nacl (<< 1.1.0). -- Andrej Shadura Wed, 02 May 2018 12:02:15 +0200 matrix-synapse (0.28.0+dfsg-2) unstable; urgency=medium * Prefer python-nacl (>= 1.1.0) and python-pymacaroons. -- Andrej Shadura Tue, 01 May 2018 14:15:54 +0200 matrix-synapse (0.28.0+dfsg-1) unstable; urgency=medium * New upstream version. * Refresh patches. * Enable systemd journal logging by default. -- Andrej Shadura Mon, 30 Apr 2018 14:12:04 +0200 matrix-synapse (0.27.2+dfsg-1) unstable; urgency=medium [ Andrej Shadura ] * New upstream version. * Add python-phonenumbers dependency. * Drop a patch to not depend on python-phonenumbers. * Refresh patches. * Make the package team-maintained. [ Richard van der Hoff ] * Remove level for file log handler from the default log.yaml. -- Andrej Shadura Tue, 27 Mar 2018 17:39:49 +0200 matrix-synapse (0.24.0+dfsg-1) unstable; urgency=medium * New upstream version. * Remove an extra oversionmangle from debian/watch. * Drop a patch applied upstream. * Update debian/copyright. * Add a patch to temporarily avoid phonenumbers dependency. -- Andrew Shadura Tue, 24 Oct 2017 15:25:33 +0100 matrix-synapse (0.19.2+dfsg-6) unstable; urgency=medium [ Simó Albert i Beltran ] * Use set -e instead of passes -e to hte shell on the #! at debian/postinst [ Rui Branco ] * Add Portuguese translation for debconf messages. [ Andrew Shadura ] * Temporarily add an optional dependency on python-pymacaroons-pynacl for python-nacl << 1.1.0. -- Andrew Shadura Mon, 27 Mar 2017 11:52:05 +0200 matrix-synapse (0.19.2+dfsg-5) unstable; urgency=medium [ Simó Albert i Beltran ] * When purging remove configuration files created by debian/postinst (Closes: #857428) [ Helge Kreutzmann ] * Add initial German debconf translation. (Closes: #857526) [ Rahul De ] * Fail silently if server name is not configured (Closes: #857619) -- Andrew Shadura Sat, 18 Mar 2017 11:14:06 +0100 matrix-synapse (0.19.2+dfsg-4) unstable; urgency=medium * Add bcrypt and pymacaroons to pydist-overrides so that the runtime dependencies are picked up automatically. -- Andrew Shadura Fri, 10 Mar 2017 12:04:52 +0100 matrix-synapse (0.19.2+dfsg-3) unstable; urgency=medium * Add missing copyrights for jwt.py and saml2.py (Thanks to Andreas Henriksson). -- Andrew Shadura Mon, 06 Mar 2017 20:53:50 +0100 matrix-synapse (0.19.2+dfsg-2) unstable; urgency=medium * Move to Section: net. * Add Vcs-*. * Add Homepage. * Use oversionmangle and dversionmangle in debian/watch. * Move Apache-2.0 license text into a separate paragraph. -- Andrew Shadura Tue, 21 Feb 2017 18:32:09 +0100 matrix-synapse (0.19.2+dfsg-1) unstable; urgency=medium * Don't install upstream's minified jquery, depend on libjs-jquery. * Include the source code for jquery-2.1.3.min.js * Don't load reCAPTCHA. * Update debian/copyright. * Set repacksuffix, remove debian uupdate. * Actually add lsb-base as a dependency. -- Andrew Shadura Tue, 21 Feb 2017 18:01:45 +0100 matrix-synapse (0.19.2-1) unstable; urgency=medium [ Sunil Mohan Adapa ] * Bump standards version to 3.9.8. * Don't ignore errors in debian/config. * Internationalise strings in the template file. * Add lsb-base as a dependency. * Update debconf questions. * Add manpages for all binaries. [ Andrew Shadura ] * New upstream version. * Update debian/copyright file. -- Andrew Shadura Tue, 21 Feb 2017 16:14:52 +0100 matrix-synapse (0.19.1-1) unstable; urgency=medium [ Erik Johnston ] * Initial packaging for the upstream version 0.19.1. [ Andrew Shadura ] * First upload to Debian (Closes: #830601). -- Andrew Shadura Tue, 21 Feb 2017 15:39:04 +0100