{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Fix for CVE-2019-5885\n\nUpgrade notes available at https://github.com/matrix-org/synapse/blob/v0.34.0/UPGRADE.rst#upgrading-to-v0340 - Note this continues to use Python 2.\n", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2019-01-11 21:09:35", "date_modified": "2019-01-14 15:37:14", "date_approved": null, "date_testing": "2019-01-15 03:30:19", "date_stable": "2019-01-23 01:45:38", "alias": "FEDORA-2019-c6044b3fce", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2019-01-23 01:45:38", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2019-c6044b3fce", "title": "matrix-synapse-0.34.0.1-2.fc28", "version_hash": "f848fad27ab31281f0d6bd979310743178383565", "release": {"name": "F28", "long_name": "Fedora 28", "version": "28", "id_prefix": "FEDORA", "branch": "f28", "dist_tag": "f28", "stable_tag": "f28-updates", "testing_tag": "f28-updates-testing", "candidate_tag": "f28-updates-candidate", "pending_signing_tag": "f28-signing-pending", "pending_testing_tag": "f28-updates-testing-pending", "pending_stable_tag": "f28-updates-pending", "override_tag": "f28-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "jcline", "email": "jeremy@jcline.org", "id": 2383, "avatar": "https://seccdn.libravatar.org/avatar/1a108f46a960aa35efcabd0b779cd59b8c3aba2927213fe63373921e1aa3fac4?s=24&d=retro", "openid": "jcline.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "erlang"}, {"name": "erlang-maint-sig"}, {"name": "cloud-sig"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by jcline. ", "timestamp": "2019-01-11 21:09:35", "update_id": 129832, "user_id": 91, "id": 883575, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-01-12 02:35:51", "update_id": 129832, "user_id": 91, "id": 883716, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "Updated, but not started.\nUpdate with dnf update --enablerepo=updates-testing matrix-synapse.\nSystemd log on start:\nJan 13 20:30:00 synapse.smthd.com systemd[1]: Started Synapse Matrix homeserver.\nJan 13 20:30:00 synapse.smthd.com python2.7[1132]: Missing Requirement: Version of 'pynacl>=1.2.0' in '/usr/lib64/python2.7/site-packages/nacl/__init__.pyc' is too old. '1.2.0' < '1.2.1'\n", "timestamp": "2019-01-13 17:37:02", "update_id": 129832, "user_id": 4690, "id": 884109, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taur", "email": "taur.firiath@gmail.com", "id": 4690, "avatar": "https://seccdn.libravatar.org/avatar/7ca2de6557b4838c90bec9c28cabff51855c467bc6ff916a1de644fd4df4f5bd?s=24&d=retro", "openid": "taur.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.", "timestamp": "2019-01-13 17:37:02", "update_id": 129832, "user_id": 91, "id": 884110, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Why in your pinacl patch pynacl>=1.2.0, but nacl>=1.2.1? I set nacl>=1.2.0 and it works.", "timestamp": "2019-01-13 19:43:24", "update_id": 129832, "user_id": 4690, "id": 884111, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taur", "email": "taur.firiath@gmail.com", "id": 4690, "avatar": "https://seccdn.libravatar.org/avatar/7ca2de6557b4838c90bec9c28cabff51855c467bc6ff916a1de644fd4df4f5bd?s=24&d=retro", "openid": "taur.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "And users must do some manual procedures before upgrade.\nhttps://github.com/matrix-org/synapse/blob/v0.34.0/UPGRADE.rst#upgrading-to-v0340", "timestamp": "2019-01-13 19:48:26", "update_id": 129832, "user_id": 4690, "id": 884112, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taur", "email": "taur.firiath@gmail.com", "id": 4690, "avatar": "https://seccdn.libravatar.org/avatar/7ca2de6557b4838c90bec9c28cabff51855c467bc6ff916a1de644fd4df4f5bd?s=24&d=retro", "openid": "taur.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "jcline edited this update.\n\nNew build(s):\n\n- matrix-synapse-0.34.0.1-2.fc28\n\nRemoved build(s):\n\n- matrix-synapse-0.34.0.1-1.fc28\n\nKarma has been reset.", "timestamp": "2019-01-14 15:37:11", "update_id": 129832, "user_id": 91, "id": 884329, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by jcline. ", "timestamp": "2019-01-14 15:37:12", "update_id": 129832, "user_id": 91, "id": 884330, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Thanks for the testing and feedback, taur. I've rebuilt it with the fixed dependency pinning in matrix-synapse-0.34.0.1-2.fc28.", "timestamp": "2019-01-14 15:38:10", "update_id": 129832, "user_id": 2383, "id": 884331, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "jcline", "email": "jeremy@jcline.org", "id": 2383, "avatar": "https://seccdn.libravatar.org/avatar/1a108f46a960aa35efcabd0b779cd59b8c3aba2927213fe63373921e1aa3fac4?s=24&d=retro", "openid": "jcline.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "communishift"}, {"name": "erlang"}, {"name": "erlang-maint-sig"}, {"name": "cloud-sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "It works. Thank you.", "timestamp": "2019-01-14 16:57:58", "update_id": 129832, "user_id": 4690, "id": 884351, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taur", "email": "taur.firiath@gmail.com", "id": 4690, "avatar": "https://seccdn.libravatar.org/avatar/7ca2de6557b4838c90bec9c28cabff51855c467bc6ff916a1de644fd4df4f5bd?s=24&d=retro", "openid": "taur.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-01-15 03:32:23", "update_id": 129832, "user_id": 91, "id": 884496, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2019-01-22 06:00:28", "update_id": 129832, "user_id": 91, "id": 886980, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by jcline. ", "timestamp": "2019-01-22 08:08:51", "update_id": 129832, "user_id": 91, "id": 887051, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by jcline. ", "timestamp": "2019-01-22 08:09:34", "update_id": 129832, "user_id": 91, "id": 887052, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2019-01-23 01:45:55", "update_id": 129832, "user_id": 91, "id": 887312, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "matrix-synapse-0.34.0.1-2.fc28", "signed": true, "release_id": 21, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2019-c6044b3fce", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}