Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v1.68, add administration API protection, various fixes #336

Merged
merged 28 commits into from
Oct 25, 2022
Merged

v1.68, add administration API protection, various fixes #336

merged 28 commits into from
Oct 25, 2022

Commits on Feb 21, 2022

  1. Fix change_url's ynh_permission_url parameters

    tituspijean committed Feb 21, 2022
    Configuration menu
    Copy the full SHA
    e3b992c View commit details
    Browse the repository at this point in the history

Commits on Sep 18, 2022

  1. Add /_synapse path permission for administration API

    tituspijean committed Sep 18, 2022
    Configuration menu
    Copy the full SHA
    678dea3 View commit details
    Browse the repository at this point in the history

  2. Add documentation on admin API

    tituspijean committed Sep 18, 2022
    Configuration menu
    Copy the full SHA
    918fe60 View commit details
    Browse the repository at this point in the history

  3. Handle /_synapse permission in change_url too

    tituspijean committed Sep 18, 2022
    Configuration menu
    Copy the full SHA
    8e3f7d9 View commit details
    Browse the repository at this point in the history

  4. Auto-update README

    @yunohost-bot
    yunohost-bot committed Sep 18, 2022
    Configuration menu
    Copy the full SHA
    d34d6e9 View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2022

  1. Readd missing disclaimer items

    tituspijean committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    64fa071 View commit details
    Browse the repository at this point in the history

  2. Auto-update README

    @yunohost-bot
    yunohost-bot committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    b29f96f View commit details
    Browse the repository at this point in the history

  3. Typo in disclaimer

    tituspijean committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    dbb80b4 View commit details
    Browse the repository at this point in the history

  4. Auto-update README

    @yunohost-bot
    yunohost-bot committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    b6108b7 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #301 from YunoHost-Apps/add-_synapse-perm

    tituspijean committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    b9c53ea View commit details
    Browse the repository at this point in the history

  6. No need to change permissions 

    Co-authored-by: Josué Tille <josue@tille.ch>
    @Josue-T
    tituspijean and Josue-T committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    752f2d3 View commit details
    Browse the repository at this point in the history

  7. Merge branch 'testing' into fix-changeurl

    tituspijean committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    2e06f53 View commit details
    Browse the repository at this point in the history

Commits on Sep 21, 2022

  1. Merge pull request #300 from YunoHost-Apps/fix-changeurl 

    Fix change_url's ynh_permission_url parameters
    @Josue-T
    Josue-T committed Sep 21, 2022
    Configuration menu
    Copy the full SHA
    49adc33 View commit details
    Browse the repository at this point in the history

Commits on Sep 26, 2022

  1. Bump package version

    tituspijean committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    224bac0 View commit details
    Browse the repository at this point in the history

  2. Auto-update README

    @yunohost-bot
    yunohost-bot committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    823f98a View commit details
    Browse the repository at this point in the history

  3. Merge remote-tracking branch 'origin/testing' into fix-ldap

    @yalh76
    yalh76 committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    de222c2 View commit details
    Browse the repository at this point in the history

  4. fix bind_dn

    @yalh76
    yalh76 committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    63b5955 View commit details
    Browse the repository at this point in the history

Commits on Sep 28, 2022

  1. Merge pull request #337 from YunoHost-Apps/fix-ldap 

    Fix ldap
    @Josue-T
    Josue-T committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    421c9f5 View commit details
    Browse the repository at this point in the history

  2. Upgrade synapse to 1.68.0

    @Josue-T
    Josue-T committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    f759771 View commit details
    Browse the repository at this point in the history

  3. Auto-update README

    @yunohost-bot
    yunohost-bot committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    9688c7c View commit details
    Browse the repository at this point in the history

  4. Merge pull request #338 from YunoHost-Apps/v1.68 

    V1.68
    @Josue-T
    Josue-T committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    48dcabb View commit details
    Browse the repository at this point in the history

Commits on Oct 18, 2022

  1. Upgrade synapse to 1.69.0

    @Josue-T
    Josue-T committed Oct 18, 2022
    Configuration menu
    Copy the full SHA
    620a645 View commit details
    Browse the repository at this point in the history

  2. Auto-update README

    @yunohost-bot
    yunohost-bot committed Oct 18, 2022
    Configuration menu
    Copy the full SHA
    3edf8f1 View commit details
    Browse the repository at this point in the history

Commits on Oct 19, 2022

  1. turnserver.conf: remove no-loopback-peers 

    See coturn/coturn@8a60754

Option removed in 4.5.2. This was a sane default before, but now coturn complains on startup that this option is invalid:
> Bad configuration format: no-loopback-peers

See also:
cve-2020-26262
GHSA-6g6j-r9rf-cm7p
https://www.rtcsec.com/article/cve-2020-26262-bypass-of-coturns-access-control-protection/
https://www.mageni.net/vulnerability/coturn-452-loopback-bypass-vulnerability-145204
    @MayeulC
    MayeulC committed Oct 19, 2022
    Configuration menu
    Copy the full SHA
    20910ed View commit details
    Browse the repository at this point in the history

Commits on Oct 20, 2022

  1. Merge pull request #342 from MayeulC/patch-2 

    turnserver.conf: remove no-loopback-peers
    @Josue-T
    Josue-T committed Oct 20, 2022
    Configuration menu
    Copy the full SHA
    478f81f View commit details
    Browse the repository at this point in the history

Commits on Oct 24, 2022

  1. Fix requirement

    @Josue-T
    Josue-T committed Oct 24, 2022
    Configuration menu
    Copy the full SHA
    caedb3f View commit details
    Browse the repository at this point in the history

  2. Update scripts/upgrade

    @Josue-T
    Josue-T committed Oct 24, 2022
    Configuration menu
    Copy the full SHA
    334d100 View commit details
    Browse the repository at this point in the history

  3. Update scripts/install

    @Josue-T
    Josue-T committed Oct 24, 2022
    Configuration menu
    Copy the full SHA
    4c9ff8d View commit details
    Browse the repository at this point in the history