* VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
(bsc#1147137)
* use standard %lld instead of non-standard %Ld format specifier
* try to avoid (temporary) -rw------- root:root files on receiving side
* fix diff mode truncation to first 512 byte
* disable xinetd template by default as preparation for systemd socket unit
* add systemd csync2.socket and csync2@.service templates
* escape peername in SQL statements
- Remove patches contained by update:
* 0003-Set-AC_PROG_CPP-in-configure.ac.patch
* 0002-Patch-sonames.patch
* 0001-Add-COPYING-as-docfile.patch
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=55
- Update patches
* Add 0001-Add-COPYING-as-docfile.patch
* Add 0002-Patch-sonames.patch
* Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
* Remove add-COPYING.patch
* Remove add-ac_prog_cpp.patch
* Remove fix-sonames.patch
- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr >& stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches
- Avoid systemd service removal errors when uninstalling (bsc#1093165)
- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
only one tool for the job
* Also remove patch csync2-fix-xinetd.patch
- Requires(post) hostname|openssl
- Avoid runtime dependency on systemd, the macros can all deal with
its absence.
- Ensure csync@.service template instances are disabled on package
removal.
- Update to csync2-2.0-6-g10636a4:
- Document the -N flag to bind csync2 to a specific ip address.
- fix diff mode truncation to first 512 byte
- fix diff mode prefix substitution
- Drop merged patches:
- Remove csync2-librsync-1.0.0.patch
- Remove fix-csync2_ssl_cert-filename.patch
- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.
- Ensure COPYING file is included in package
+ Added add-COPYING.patch
- Update to upstream version 2.0-rc2. Changes since 1.34 too numerous
to list, but include:
+ Database abstraction layer (default build uses sqlite3)
+ IPv6 support
+ Native GnuTLS support
+ tempdir and lock-timeout config options
+ do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
+ Added csync2.socket and csync2@.service for use via systemd
+ Added add-ac_prog_cpp.patch
+ Added fix-csync2_ssl_cert-filename.patch
+ Added fix-sonames.patch
+ Updated csync2-fix-xinetd.patch
+ Updated README.quickstart
+ Removed fix-missing-sentinels.diff (upstream)
+ Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
+ Removed force-debug-stderr-off-inetd.patch (obsolete)
+ Removed bind-to-local-hostname.patch (obsolete)
- Try to bind to "local" IP explicitly to avoid "identification failed"
errors with multiple IPs on same subnet (bnc#757327)
+ Added bind-to-local-hostname.patch
- update license to new format
- Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE)
- Force debug output off completely when running under xinetd (fixes
protocol breakage when target directories don't exist; bnc#752563)
- factory has librsync split into devel package
- Remove explicit lib dependencies from spec file
- Add csync2-rm-ssl-cert helper script (bnc#709811)
- Remove redundant tags/sections from specfile
- Fix build against gnutls 2.8 in factory (integrated patch from
http://bugs.gentoo.org/show_bug.cgi?id=274213)
- fix build against current openssl
- Init import of csync2 for DRBD configuration file sync (fate#307419)
OBS-URL: https://build.opensuse.org/request/show/705600
OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/csync2?expand=0&rev=52
