CVS commit: pkgsrc/chat/matrix-synapse

["Greg Troxel" <gdt%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   gdt
Date:           Tue Jul 28 20:54:16 UTC 2026

Modified Files:
        pkgsrc/chat/matrix-synapse: Makefile PLIST distinfo

Log Message:
chat/matrix-synapse: Update to 1.157.2

# Synapse 1.157.2 (2026-07-28)

This security release addresses several vulnerabilities.

Please upgrade when you can, particularly if your homeserver participates in open federation
and/or has untrusted local users.

## Security Fixes

High severity:

- Fix [ELEMENTSEC-2026-1071](https://github.com/element-hq/synapse/security/advisories/GHSA-fp53-rw9v-hcf9)
- Fix [ELEMENTSEC-2024-1520](https://github.com/element-hq/synapse/security/advisories/GHSA-rgv2-84w7-5j9p)
- Fix [ELEMENTSEC-2026-1717](https://github.com/element-hq/synapse/security/advisories/GHSA-27p5-4f45-gx76)
- Fix [ELEMENTSEC-2026-1721](https://github.com/element-hq/synapse/security/advisories/GHSA-95fh-hv8c-chvq)
- Fix [ELEMENTSEC-2026-1729](https://github.com/element-hq/synapse/security/advisories/GHSA-cjh7-rcpx-xpf8)
- Fix [ELEMENTSEC-2026-1740](https://github.com/element-hq/synapse/security/advisories/GHSA-6wjm-9p2x-gvpm)

Moderate severity:

- Fix [ELEMENTSEC-2026-1714](https://github.com/element-hq/synapse/security/advisories/GHSA-qcjr-46gf-7f4r)
- Fix [ELEMENTSEC-2026-1718](https://github.com/element-hq/synapse/security/advisories/GHSA-r66v-qhwx-8rg4)
- Fix [ELEMENTSEC-2026-1751](https://github.com/element-hq/synapse/security/advisories/GHSA-jhcg-5392-5mjw)

Low severity:

- Fix [ELEMENTSEC-2026-1703](https://github.com/element-hq/synapse/security/advisories/GHSA-vh4c-pqh4-w3wq)
- Fix [ELEMENTSEC-2026-1760](https://github.com/element-hq/synapse/security/advisories/GHSA-hgcg-p9gx-fq5f)


To generate a diff of this commit:
cvs rdiff -u -r1.132 -r1.133 pkgsrc/chat/matrix-synapse/Makefile
cvs rdiff -u -r1.71 -r1.72 pkgsrc/chat/matrix-synapse/PLIST
cvs rdiff -u -r1.94 -r1.95 pkgsrc/chat/matrix-synapse/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/chat/matrix-synapse/Makefile
diff -u pkgsrc/chat/matrix-synapse/Makefile:1.132 pkgsrc/chat/matrix-synapse/Makefile:1.133
--- pkgsrc/chat/matrix-synapse/Makefile:1.132   Fri Jul 24 11:47:14 2026
+++ pkgsrc/chat/matrix-synapse/Makefile Tue Jul 28 20:54:16 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.132 2026/07/24 11:47:14 gdt Exp $
+# $NetBSD: Makefile,v 1.133 2026/07/28 20:54:16 gdt Exp $
 
-DISTNAME=      matrix-synapse-1.157.1
+DISTNAME=      matrix-synapse-1.157.2
 CATEGORIES=    chat
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=element-hq/}
 GITHUB_PROJECT=        synapse

Index: pkgsrc/chat/matrix-synapse/PLIST
diff -u pkgsrc/chat/matrix-synapse/PLIST:1.71 pkgsrc/chat/matrix-synapse/PLIST:1.72
--- pkgsrc/chat/matrix-synapse/PLIST:1.71       Fri Jul 24 11:47:14 2026
+++ pkgsrc/chat/matrix-synapse/PLIST    Tue Jul 28 20:54:16 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.71 2026/07/24 11:47:14 gdt Exp $
+@comment $NetBSD: PLIST,v 1.72 2026/07/28 20:54:16 gdt Exp $
 bin/export_signing_key
 bin/generate_config
 bin/generate_log_config
@@ -253,6 +253,9 @@ ${PYSITELIB}/synapse/config/password_aut
 ${PYSITELIB}/synapse/config/push.py
 ${PYSITELIB}/synapse/config/push.pyc
 ${PYSITELIB}/synapse/config/push.pyo
+${PYSITELIB}/synapse/config/push_rules.py
+${PYSITELIB}/synapse/config/push_rules.pyc
+${PYSITELIB}/synapse/config/push_rules.pyo
 ${PYSITELIB}/synapse/config/ratelimiting.py
 ${PYSITELIB}/synapse/config/ratelimiting.pyc
 ${PYSITELIB}/synapse/config/ratelimiting.pyo

Index: pkgsrc/chat/matrix-synapse/distinfo
diff -u pkgsrc/chat/matrix-synapse/distinfo:1.94 pkgsrc/chat/matrix-synapse/distinfo:1.95
--- pkgsrc/chat/matrix-synapse/distinfo:1.94    Fri Jul 24 11:47:14 2026
+++ pkgsrc/chat/matrix-synapse/distinfo Tue Jul 28 20:54:16 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.94 2026/07/24 11:47:14 gdt Exp $
+$NetBSD: distinfo,v 1.95 2026/07/28 20:54:16 gdt Exp $
 
 BLAKE2s (aho-corasick-1.1.3.crate) = 36150b5dacb72fa7cd0d33aee15e14857914224878f0af76eabcb9daa68e3ae0
 SHA512 (aho-corasick-1.1.3.crate) = ba422a54688c4678fcf16e34fdf3ed06c333e6e3fc8b75af9272a215add494d43ebaef319021134b61327fd5d3572aec0dc655b714ffb3bc71ba3c265c9ebb69
@@ -228,9 +228,9 @@ Size (log-0.4.33.crate) = 52997 bytes
 BLAKE2s (lru-slab-0.1.2.crate) = aa3f3674478a76b09b52e1c77b3fc8382ad771a643b4184baf095d0dd7f35d1b
 SHA512 (lru-slab-0.1.2.crate) = eb93796ffaccafd2e2530efeaf60dab1eeb17fe61652a9299c220cea4dd9099239eb549ae1259ac272c5aa807eebfaec6db4dc5efc95ee59365d3fd1d413f60f
 Size (lru-slab-0.1.2.crate) = 9090 bytes
-BLAKE2s (matrix-synapse-1.157.1.tar.gz) = 8abd581624b68526132d9d0a61be8fcf422c652ba367299a8b1beda2061bbf68
-SHA512 (matrix-synapse-1.157.1.tar.gz) = 9144b93512ce4e52b4f34b7721e978e6ee7c1b1150ec888db3428459ddaca8f0b14a4bec93c6a4486f277a24d9cfc14d7fe84b9d403a506e093c68f0e6d9a17c
-Size (matrix-synapse-1.157.1.tar.gz) = 9482495 bytes
+BLAKE2s (matrix-synapse-1.157.2.tar.gz) = 8bbc648b35f83a00411522e54f653549c6fd3a0be2ba846ca11f5899f991d6a8
+SHA512 (matrix-synapse-1.157.2.tar.gz) = 63642d087689d032486f12317015333148a53ca61a0f9b41f6ab512c92dc551a87cd88e8927970e7fe8a39fe1407c837169c3919858b9b726393a8cac1533682
+Size (matrix-synapse-1.157.2.tar.gz) = 9501470 bytes
 BLAKE2s (memchr-2.7.5.crate) = 741834638b9ed49c5a8ab61a0aeac280a8d91d104fafe3c7219d313131694001
 SHA512 (memchr-2.7.5.crate) = 2606ee16a7dc02db95dac17cebd2cac9deb2e23d7ea62972cdb19145c06eaf75631347a49c4e6ceeff89fb6e90e992f9bca0a9c955eb5130f89ba2bd865936e1
 Size (memchr-2.7.5.crate) = 97603 bytes