CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

net-im/py-matrix-synapse1.161.0_2

Matrix protocol reference homeserver

Maintainer
ports@skyforge.at
Packages
py312-matrix-synapse 1.161.0_2
Upstream
Higher version available: 1.163.2
CPE
matrix:synapse
WWW
https://element-hq.github.io/synapse/latest/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (193)

Mikael Urankar (mikael) · 1.161.0_2
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Alan Somers (asomers) · 1.161.0_1
*/*: Fix many Rust ports to run without COMPAT11

RISCV does not include COMPAT11 by default.  But Rust's libc bound the
compat-11 symbols until version 0.2.176.  Patch a great many Rust ports
to use a newer version of libc, to eliminate the dependency on COMPAT11.
Explicitly patching Cargo.lock isn't usually necessarily, since within
the build jail cargo is forced to use whichever crates Makefile.crates
installs there.

Notes on specific ports:

* textproc/bookokrat: Rework bookokrat's existing patch to be more
  robust.  Also, report the issue upstream:
  https://github.com/bugzmanov/bookokrat/issues/182

* security/sequoia-chameleon-gnupg security/sequoia-sq
  "cargo update -p libc" insisted on updating some other crates, too.

* devel/cargo-generate finance/tickrs net-im/gurk-rs
  net-p2p/oura textproc/mdbook-linkcheck www/lychee
	These creates contained an extra entry in CARGO_CRATES for
	openssl-src.  I don't know why.  Remove it.

* www/tuifeed
	Alone among all the crates touched, this one uses cargo's
	--locked argument.  So I had to create a patch-Cargo.lock file
	for it.

There are several other ports that still use old versions of libc.  But
for various reasons, each needs more attention that I can afford in this
already-large commit.

PR:		297814
exp-run:	antoine
Approved by:	portmgr timeout (2+ weeks)
396c159306
Kurt Jaeger (pi) · 1.161.0
net-im/py-matrix-synapse: update 1.151.0 -> 1.161.0

PR:		296583
Reviewed-by:	russian@russerver.org
Tested-by:	russian@russerver.org
Changes:	https://github.com/element-hq/synapse/blob/release-v1.161/CHANGES.md
dc93ca6279
Mikael Urankar (mikael) · 1.151.0_4
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Mikael Urankar (mikael) · 1.151.0_3
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Mikael Urankar (mikael) · 1.151.0_2
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Mikael Urankar (mikael) · 1.151.0_1
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Yusuf Yaman (nxjoseph) · 1.151.0
net-im/py-matrix-synapse: Update 1.138.0 => 1.151.0 (security)

Changelogs:
https://github.com/element-hq/synapse/blob/v1.151.0/CHANGES.md

PR:		292129
Reported by:	Sascha Biberhofer <ports@skyforge.at> (maintainer)
Approved by:	osa (mentor)
MFH:		2026Q2
Security:	CVE-2025-61672
		CVE-2026-24044
a7691f104e
Mikael Urankar (mikael) · 1.138.0_8
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Älven (alven) · 1.138.0_7
net-im/py-matrix-synapse: Update WWW and description

PR:		274257
Approved by:	Sascha Biberhofer <ports@skyforge.at> (maintainer,
timeout > 2 weeks)
Approved by:	db@, yuri@ (Mentors, implicit)
85333a2163
Mikael Urankar (mikael) · 1.138.0_7
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Vsevolod Stakhov (vsevolod) · 1.138.0_6
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Mikael Urankar (mikael) · 1.138.0_5
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Po-Chuan Hsieh (sunpoet) · 1.138.0_4
security/py-pyopenssl: Move security/py-openssl to security/py-pyopenssl

- Update WWW
- Convert to USE_PYTHON=pep517
- Clean up Makefile
- Bump PORTREVISION for package change
- Bump PORTREVISION of dependent ports for dependency change
aafe9a2135
Mikael Urankar (mikael) · 1.138.0_3
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Po-Chuan Hsieh (sunpoet) · 1.138.0_2
net-im/py-matrix-synapse: Allow build with py-poetry-core 2.2.1 and py-setuptools-rust 1.12.0

- Bump PORTREVISION for package change

Approved by:	portmgr (blanket)
With hat:	python
a28938f4d2
Mikael Urankar (mikael) · 1.138.0_1
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Vladimir Druzenko (vvd) · 1.138.0
net-im/py-matrix-synapse: Update 1.135.0 => 1.138.0 (security)

Changelogs:
https://github.com/element-hq/synapse/blob/v1.138.0/CHANGES.md

This release includes support for room version 12 which fixes a number
of security vulnerabilities, including CVE-2025-49090.

PR:		289253
Approved by:	Sascha Biberhofer <ports@skyforge.at> (maintainer, timeout 2 weeks)
Security:	CVE-2025-49090
MFH:		2025Q3
c460176f75
Hiroki Tagato (tagattie) · 1.135.0_3
*/*: switch dependency from devel/py-lxml5 to devel/py-lxml

Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml  (now at version 6.0.1)

To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.

Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.

PR:		289491
Approved by:	Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
		crees, madpilot, delphij, marcus, nivit, kai,
		skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
		0mp, Eric Camachat <eric@camachat.org>
a6233e5a2f
Mikael Urankar (mikael) · 1.135.0_2
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Rene Ladan (rene) · 1.135.0_1
all: bump PORTREVISION after updating graphics/libyuv

Using the Tools/scripts/bump_revision.pl script
b304d8ab18
Älven (alven) · 1.135.0
net-im/py-matrix-synapse: Update to 1.135.0

PR:		288639
Approved by:	yuri@ (Mentor)
874e6cd6cc
Hiroki Tagato (tagattie) · 1.131.0_3
*/*: update dependency on devel/py-lxml to devel/py-lxml5 (2nd attempt)

This is a follow up to the commit 230fb2661c78, which updated some
ports' dependencies on devel/py-lxml to devel/py-lxml5. It was an
attempt to follow the dependency change of
www/py-beautifulsoup. However, the switch was incomplete and broke
some other ports.

It has turned out that the ports depending on devel/py-lxml (at
version 4.9.3) does not limit their dependencies' upper bound to 4.x
except for one (devel/py-pymaven-patch). So updating them to
devel/py-lxml5 (at version 5.4.0) should cause no harm.

This commit switch dependencies of all the ports (except
devel/py-pymaven-patch) to devel/py-lxml5 avoid potential conflicts.

Co-authored-by: Daniel Engberg <diizzy@FreeBSD.org>

PR:		287144, 288047
Reported by:	makc (via ports-committers),
		vvd (PR 288047),
		diizzy (PR 287144)
Approved by:	portmgr (chase dependency change, unbreak build)
Fixes:		230fb2661c78 (*/*: update dependency on devel/py-lxml to devel/py-lxml5)
0b0f7cda9d
Mikael Urankar (mikael) · 1.131.0_2
lang/rust: Bump revisions after 1.88.0

PR:		287766
f3f7e555b0
Mikael Urankar (mikael) · 1.131.0_1
lang/rust: Bump revisions after 1.87.0

PR:		286829
3ed29b8185
Ashish SHUKLA (ashish) · 1.131.0
net-im/py-matrix-synapse: Update to 1.131.0

PR:		287282
2defb307ff
Ashish SHUKLA (ashish) · 1.127.1
net-im/py-matrix-synapse: Update to 1.127.1

Signed-off-by: Sascha Biberhofer <sascha.biberhofer@skyforge.at>

PR:		285773
MFH:		2025Q2
Security:	CVE-2025-30355
Security:	e9b8e519-0d50-11f0-86d8-901b0e934d69
a4075c2abe
Yuri Victorovich (yuri) · 1.125.0_1
net-im/py-matrix-synapse: Fix build by removing the upper limit on devel/py-setuptools-rust dependency
d1926a557d
Mikael Urankar (mikael) · 1.125.0_1
lang/rust: Bump revisions after 1.86.0

PR:		285840
2a5976aebe
Ashish SHUKLA (ashish) · 1.125.0
net-im/py-matrix-synapse: Update to 1.125.0

PR:		283422
f59fbc4e16
Mikael Urankar (mikael) · 1.120.2_3
lang/rust: Bump revisions after 1.85.0

PR:		284884
cf7c4b037d
Po-Chuan Hsieh (sunpoet) · 1.120.2_2
net-im/py-matrix-synapse: Allow build with py-poetry-core 2.0.1

- Bump PORTREVISION for package change

Approved by:	portmgr (blanket)
With hat:	python
b390108e14
Mikael Urankar (mikael) · 1.120.2_1
lang/rust: Bump revisions after 1.84.0

PR:		283962
fccaa1b326
Ashish SHUKLA (ashish) · 1.120.2
net-im/py-matrix-synapse: Update to 1.120.2

Signed-off-by: Sascha Biberhofer <sascha.biberhofer@skyforge.at>

PR:		283350
Security:	71f3e9f0-bafc-11ef-885d-901b0e934d69
Security:	CVE-2024-52805
Security:	CVE-2024-52815
Security:	CVE-2024-53863
Security:	CVE-2024-53867
Security:	CVE-2024-37302
Security:	CVE-2024-37303
MFH:		2024Q4
ed0cc647e1
Mikael Urankar (mikael) · 1.118.0_2
lang/rust: Bump revisions after 1.83.0

PR:		283000
1d1fd15a3e
Mikael Urankar (mikael) · 1.118.0_1
lang/rust: Bump revisions after 1.82.0

PR:		282516
ca048c2884
Ashish SHUKLA (ashish) · 1.118.0
net-im/py-matrix-synapse: Update to 1.118.0

- Update WWW reference (Thanks lwhsu@).

PR:		282497
ff1cc6771e
Po-Chuan Hsieh (sunpoet) · 1.116.0_2
net-im/py-matrix-synapse: Allow build with py-poetry-core 1.9.1

- Bump PORTREVISION for package change

Approved by:	portmgr (blanket)
With hat:	python
bf1bd6b162
Po-Chuan Hsieh (sunpoet) · 1.116.0_1
net-im/py-matrix-synapse: Allow build with py-setuptools-rust 1.10.2

Approved by:	portmgr (blanket)
With hat:	python
a4c651e164
Ashish SHUKLA (ashish) · 1.116.0
net-im/py-matrix-synapse: Update to 1.116.0

- Add shebangfix for the CLI scripts
- Switch to pep517 from distutils

PR:		281836
3adb14bc1f
Ashish SHUKLA (ashish) · 1.115.0
net-im/py-matrix-synapse: Update to 1.115.0

- Update WWW
- Update pkg-descr

PR:		281106
7f72176b45
Mikael Urankar (mikael) · 1.111.0_2
lang/rust: Bump revisions after 1.81.0

PR:		281300
89ab81d0e2
Mikael Urankar (mikael) · 1.111.0_1
lang/rust: Bump revisions after 1.80.1

PR:		280490
7a55f95425
Po-Chuan Hsieh (sunpoet) · 1.111.0
net-im/py-matrix-synapse: Allow build with py-setuptools-rust 1.10.1

- While I'm here, fix BUILD_DEPENDS usage

Note that <=x.y.z is vulnerable because it's broken when the port got bumped for whatever reasons.

Approved by:	portmgr (blanket)
With hat:	python
03ba8625d5
Ashish SHUKLA (ashish) · 1.111.0
net-im/py-matrix-synapse: Update to 1.111.0

- add dependency on python-multipart

PR:		278712
Approved by:	maintainer timeout
253c0ffb34
Po-Chuan Hsieh (sunpoet) · 1.105.1_4
devel/py-pyyaml: Move devel/py-yaml to devel/py-pyyaml

- Bump PORTREVISION of dependent ports for dependency change
1a80ec7c22
Mikael Urankar (mikael) · 1.105.1_3
lang/rust: Bump revisions after 1.79.0

PR:		279707
21476ca8a9
Vsevolod Stakhov (vsevolod) · 1.105.1_2
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Mikael Urankar (mikael) · 1.105.1_1
lang/rust: Bump revisions after 1.78.0

PR:		278834
2322b66100
Ashish SHUKLA (ashish) · 1.105.1
net-im/py-matrix-synapse: Update to 1.105.1

MFH:		2024Q2
Security:	bdfa6c04-027a-11ef-9c21-901b0e9408dc
Security:	CVE-2024-31208
Approved by:	maintainer (implicit approval for security issue)
e1926322c7