Fix for CVE-2019-5885
Upgrade notes available at https://github.com/matrix-org/synapse/blob/v0.34.0/UPGRADE.rst#upgrading-to-v0340 - Note this continues to use Python 2.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2019-c6044b3fce
Please login to add feedback.
This update has been submitted for testing by jcline.
This update has been pushed to testing.
Updated, but not started. Update with dnf update --enablerepo=updates-testing matrix-synapse. Systemd log on start: Jan 13 20:30:00 synapse.smthd.com systemd[1]: Started Synapse Matrix homeserver. Jan 13 20:30:00 synapse.smthd.com python2.7[1132]: Missing Requirement: Version of 'pynacl>=1.2.0' in '/usr/lib64/python2.7/site-packages/nacl/init.pyc' is too old. '1.2.0' < '1.2.1'
Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.
Why in your pinacl patch pynacl>=1.2.0, but nacl>=1.2.1? I set nacl>=1.2.0 and it works.
And users must do some manual procedures before upgrade. https://github.com/matrix-org/synapse/blob/v0.34.0/UPGRADE.rst#upgrading-to-v0340
jcline edited this update.
New build(s):
Removed build(s):
Karma has been reset.
This update has been submitted for testing by jcline.
Thanks for the testing and feedback, taur. I've rebuilt it with the fixed dependency pinning in matrix-synapse-0.34.0.1-2.fc28.
It works. Thank you.
This update has been pushed to testing.
This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes
This update has been submitted for batched by jcline.
This update has been submitted for stable by jcline.
This update has been pushed to stable.