From nobody Wed Jun 29 04:29:11 2022 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 75CF6861050; Wed, 29 Jun 2022 04:29:11 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4LXpPz2svyz3MD1; Wed, 29 Jun 2022 04:29:11 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1656476951; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=a09ZaXij4mdBNeTaw/tGr94SQLxBuf/DfkyXNjy3oyc=; b=LotON14gXE/MXz6SVM6ly2Fc4PQzEV8YhDT4qAKEnS4JVT4PpNj+sunwy5zSLKBQ2Smna2 cT2wev/0X7EtjRfQe1ZiT9yDcd9rJiFG2gBuqdGZIljJ1LvRuIwXNmEWDDetyK7jeWhPCg jtwUfCoUt7q7wjk7bZlNLwLSH4SDuXjTF91MT6Kbz6E6HQzIgQedAry40YutHIy9tOlZyx fGk9XW69L0v6BPAWXJt2am+X2TN5M8Gzm+oulvWzX1xO0iSd1dVd6NpmAzoO2vFhQ7GN4+ 7RjJbA1eVU7XLt0WiT3+3sJTq0d+PWbiMBRUHWTNMSWNNvgRrTzK0iTWhUz3RQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 3FC0026EC; Wed, 29 Jun 2022 04:29:11 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 25T4TBY2090832; Wed, 29 Jun 2022 04:29:11 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 25T4TB0d090831; Wed, 29 Jun 2022 04:29:11 GMT (envelope-from git) Date: Wed, 29 Jun 2022 04:29:11 GMT Message-Id: <202206290429.25T4TB0d090831@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Ashish SHUKLA Subject: git: c4501a503083 - main - net-im/py-matrix-synapse: Update to 1.61.1 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: ashish X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: c4501a503083e9de1d8cfd936cfb244642884434 Auto-Submitted: auto-generated ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1656476951; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=a09ZaXij4mdBNeTaw/tGr94SQLxBuf/DfkyXNjy3oyc=; b=OJkwlzL7yS0h7st+XHrZtXCNfeFVA7B2UOBoMUhXnRLuY8nCZZXLXr/qR3W1j8LK7WkgbM nMtCPSbTJAmHlV5gjd0W8J9o/26ekOKwcjvQi3RZhvScQqTeSy4jENKmpf26UabNsLsZa+ jvACWmeortHQzOYjjO/x6fkJhKUKaMtj9h5HRXlqEpbCtf+0lxx7q8PHvfQ0ISyzfrq2VQ 0xwz7Fm4hgP/jOvPQukTOCGc97b9fYRy9xzzexPZeVGd+/uO86T8W49C742FIN5n8iz0XK ouyuea7WbE6t5J//+1Qw4sCqeALUqYhoHAfYFE6FcQdwOAAb8fHzgLiYZfF/vw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1656476951; a=rsa-sha256; cv=none; b=CbSwUps9jKWvp4nFW+W/wME6WdnZOQrQsVecxDha7ns4ZVDj4ip/RlxNy8bAj1GI3hLBFc 66Pef2/Q58Y98e/3dG/bJDbRfucd/ZIEo45nz8nWngABbIlC9fugIKIF5yyXy0xbpurobj OpcjvFRo+dcH/ZrVvrxIotOZOgD6+y4duPYy2eEbLHSSNzygyBzw238+0nTSw6HD2tchgx 4mIRMVRAdZhivv8N6IjN8mG74UTs8uOfl1ACQvxVgUv5foxAM9v554QIJlI/RF/pz6mUyj hvT2AVivjGTYH/jP61Z/Rvxofbw6cg9gdrFDAqB54c8CCzxL4PZ5LT71o0ZaQA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by ashish: URL: https://cgit.FreeBSD.org/ports/commit/?id=c4501a503083e9de1d8cfd936cfb244642884434 commit c4501a503083e9de1d8cfd936cfb244642884434 Author: Sascha Biberhofer AuthorDate: 2022-06-28 19:31:14 +0000 Commit: Ashish SHUKLA CommitDate: 2022-06-29 04:14:17 +0000 net-im/py-matrix-synapse: Update to 1.61.1 This minor update contains a security fix for GHSA-22p3-qrh9-cx32 / CVE-2022-31052. While we're at it, switch to pypi as package source. This not only follows general python port guidelines but also eliminates the need for poetry2setup, hopefully fixing #264178[0]. Changes: https://github.com/matrix-org/synapse/releases/tag/v1.61.1 Signed-off-by: Sascha Biberhofer PR: 264178 MFH: 2022Q2 Security: 07c0d782-f758-11ec-acaa-901b0e9408dc Security: CVE-2022-31052 --- net-im/py-matrix-synapse/Makefile | 13 +++---------- net-im/py-matrix-synapse/distinfo | 6 +++--- net-im/py-matrix-synapse/files/patch-pyproject.toml | 6 +++--- net-im/py-matrix-synapse/files/patch-setup.py | 11 +++++++++++ 4 files changed, 20 insertions(+), 16 deletions(-) diff --git a/net-im/py-matrix-synapse/Makefile b/net-im/py-matrix-synapse/Makefile index 23022e00f29b..7eb0f06b23d4 100644 --- a/net-im/py-matrix-synapse/Makefile +++ b/net-im/py-matrix-synapse/Makefile @@ -1,9 +1,9 @@ # Created by: Brendan Molloy PORTNAME= matrix-synapse -DISTVERSIONPREFIX= v -DISTVERSION= 1.61.0 +DISTVERSION= 1.61.1 CATEGORIES= net-im python +MASTER_SITES= CHEESESHOP PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} MAINTAINER= ports@skyforge.at @@ -12,8 +12,7 @@ COMMENT= Matrix protocol reference homeserver LICENSE= APACHE20 LICENSE_FILE= ${WRKSRC}/LICENSE -BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}poetry-core>=1.0.0:devel/py-poetry-core@${PY_FLAVOR} \ - ${PYTHON_PKGNAMEPREFIX}poetry2setup>=1.0.0:devel/py-poetry2setup@${PY_FLAVOR} +BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}poetry-core>=1.0.0:devel/py-poetry-core@${PY_FLAVOR} # Keep the RUN_DEPENDS layout similar to the master/synapse/python_dependencies.py file RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}jsonschema>=3.0.0:devel/py-jsonschema@${PY_FLAVOR} \ @@ -55,9 +54,6 @@ TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}virtualenv>=15.0:devel/py-virtualenv@${PY_F ${PYTHON_PKGNAMEPREFIX}idna>=2.5:dns/py-idna@${PY_FLAVOR} USES= python:3.7+ -USE_GITHUB= yes -GH_ACCOUNT= matrix-org -GH_PROJECT= synapse USE_PYTHON= autoplist distutils USE_RC_SUBR= synapse @@ -100,9 +96,6 @@ URLPREVIEW_RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}lxml>=4.2.0:devel/py-lxml@${PY_FL RUN_DEPENDS+= ${PYTHON_PKGNAMEPREFIX}importlib-metadata>=1.4:devel/py-importlib-metadata@${PY_FLAVOR} .endif -pre-configure: - cd ${WRKSRC} && poetry2setup > setup.py - post-install: ${MKDIR} ${STAGEDIR}${ETCDIR} ${INSTALL_DATA} ${WRKDIR}/log.config ${STAGEDIR}${ETCDIR}/log.config.sample diff --git a/net-im/py-matrix-synapse/distinfo b/net-im/py-matrix-synapse/distinfo index 501c3b5da815..562f51c4e70a 100644 --- a/net-im/py-matrix-synapse/distinfo +++ b/net-im/py-matrix-synapse/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1655316825 -SHA256 (matrix-org-synapse-v1.61.0_GH0.tar.gz) = 3602b4a01688edae8365973877220a0511cb3970ff4e32eec759ca070066a684 -SIZE (matrix-org-synapse-v1.61.0_GH0.tar.gz) = 7879924 +TIMESTAMP = 1656433422 +SHA256 (matrix-synapse-1.61.1.tar.gz) = 201ed822a996209331655156205e878205608e4092a24dd860cca457bda9e2eb +SIZE (matrix-synapse-1.61.1.tar.gz) = 2868292 diff --git a/net-im/py-matrix-synapse/files/patch-pyproject.toml b/net-im/py-matrix-synapse/files/patch-pyproject.toml index 903aba718c30..2d5031502396 100644 --- a/net-im/py-matrix-synapse/files/patch-pyproject.toml +++ b/net-im/py-matrix-synapse/files/patch-pyproject.toml @@ -1,7 +1,7 @@ ---- pyproject.toml.orig 2022-05-07 18:29:37 UTC +--- pyproject.toml.orig 2022-06-28 16:27:14 UTC +++ pyproject.toml -@@ -146,7 +146,7 @@ bleach = ">=1.4.3" - typing-extensions = ">=3.10.0" +@@ -147,7 +147,7 @@ bleach = ">=1.4.3" + typing-extensions = ">=3.10.0.1" # We enforce that we have a `cryptography` version that bundles an `openssl` # with the latest security patches. -cryptography = ">=3.4.7" diff --git a/net-im/py-matrix-synapse/files/patch-setup.py b/net-im/py-matrix-synapse/files/patch-setup.py new file mode 100644 index 000000000000..13c102222d1b --- /dev/null +++ b/net-im/py-matrix-synapse/files/patch-setup.py @@ -0,0 +1,11 @@ +--- setup.py.orig 2022-06-28 16:27:08 UTC ++++ setup.py +@@ -147,7 +147,7 @@ install_requires = \ + 'bcrypt>=3.1.0', + 'bleach>=1.4.3', + 'canonicaljson>=1.4.0', +- 'cryptography>=3.4.7', ++ 'cryptography', + 'frozendict>=1,!=2.1.2', + 'ijson>=3.1.4', + 'jsonschema>=3.0.0',