From c36af6134b1811f0f3ddbe683149281563c9f4b7 Mon Sep 17 00:00:00 2001 From: Steve Wills Date: Tue, 15 Jan 2019 12:21:08 +0000 Subject: net-im/py-matrix-synapse: update to 0.34.1.1, fix CVE-2019-5885 PR: 234828 Submitted by: Sascha Biberhofer (maintainer) MFH: 2019Q1 Security: 383931ba-1818-11e9-92ea-448a5b29e8a9 --- net-im/py-matrix-synapse/files/patch-python_dependencies.py | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 net-im/py-matrix-synapse/files/patch-python_dependencies.py (limited to 'net-im/py-matrix-synapse/files') diff --git a/net-im/py-matrix-synapse/files/patch-python_dependencies.py b/net-im/py-matrix-synapse/files/patch-python_dependencies.py new file mode 100644 index 000000000000..e898ec84cbf5 --- /dev/null +++ b/net-im/py-matrix-synapse/files/patch-python_dependencies.py @@ -0,0 +1,11 @@ +--- synapse/python_dependencies.py.orig 2019-01-10 17:51:27.362204447 +0100 ++++ synapse/python_dependencies.py 2019-01-10 17:51:47.559224870 +0100 +@@ -58,7 +58,7 @@ + "six>=1.10", + # prometheus_client 0.4.0 changed the format of counter metrics + # (cf https://github.com/matrix-org/synapse/issues/4001) +- "prometheus_client>=0.0.18,<0.4.0", ++ "prometheus_client>=0.0.18", + # we use attr.s(slots), which arrived in 16.0.0 + "attrs>=16.0.0", + "netaddr>=0.7.18", -- cgit v1.2.3