- Fix packages for Immutable Mode (jsc#PED-14858)
- Use sysusers tools instead of creating group and user
- Update to version 2.3.4+git23.b3631012:
* vrrp: log error if fail to update sysctl settings
* check: add SNMP variable for number of checkers not run per RS
* config: add option ${_ENV} to read environment variables
* vrrp: fix check in strict mode that have unicast peers
* vrrp: correct report of MASTER/BACKUP on notify fifo when reload
* configure: fix output formatting for close_range() test
* parser: fix handling ~SEQ with missing close bracket
* parser: add comment re sanitizer false positive
* config: detect lines with NUL characters and ignore them
* config: improve handling of parameter substitution
* config: improve handling of comment stripping and continuation lines
* vrrp: stop sending gratuitous ARP before vrrp_startup_delay expires
* vrrp: add vrrp_delay_after_boot global keyword
* vrrp: Don't start up VRRP instances before vrrp_startup_delay expires
* parser: remove unnecessary check of variable
* parser: resolve a heap buffer overflow
* snap: add staging of libssl3 and libkmod2 packages
* vrrp: remove redundant check not NULL check
* keepalived-2.3.4
* snap: fix snap builds when close_range not available
* all: fix conditional compilation when close_range() is not available
* Revert "all: fix conditional compilation when close_range() is not available"
* Revert "all: next attempt to fix building snaps without close_range()"
* Revert "snap: try and identify why snap builds are failing"
* Revert "snap: further attempt to fix close_range problem with Linux 5.8"
* Revert "snap: attempt 5 to fix close_range() snap build with Linux 5.8"
* Revert "snap: attempt 6 to fix close_range() snap build with Linux 5.8"
OBS-URL: https://build.opensuse.org/request/show/1324714
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=47
- Use sysusers tools instead of creating group and user
- Update to version 2.3.4+git23.b3631012:
* vrrp: log error if fail to update sysctl settings
* check: add SNMP variable for number of checkers not run per RS
* config: add option ${_ENV} to read environment variables
* vrrp: fix check in strict mode that have unicast peers
* vrrp: correct report of MASTER/BACKUP on notify fifo when reload
* configure: fix output formatting for close_range() test
* parser: fix handling ~SEQ with missing close bracket
* parser: add comment re sanitizer false positive
* config: detect lines with NUL characters and ignore them
* config: improve handling of parameter substitution
* config: improve handling of comment stripping and continuation lines
* vrrp: stop sending gratuitous ARP before vrrp_startup_delay expires
* vrrp: add vrrp_delay_after_boot global keyword
* vrrp: Don't start up VRRP instances before vrrp_startup_delay expires
* parser: remove unnecessary check of variable
* parser: resolve a heap buffer overflow
* snap: add staging of libssl3 and libkmod2 packages
* vrrp: remove redundant check not NULL check
* keepalived-2.3.4
* snap: fix snap builds when close_range not available
* all: fix conditional compilation when close_range() is not available
* Revert "all: fix conditional compilation when close_range() is not available"
* Revert "all: next attempt to fix building snaps without close_range()"
* Revert "snap: try and identify why snap builds are failing"
* Revert "snap: further attempt to fix close_range problem with Linux 5.8"
* Revert "snap: attempt 5 to fix close_range() snap build with Linux 5.8"
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=96
* vrrp: allow specifing interval amd timeout to milli-second resolution
* vrrp: on reload only configured track_script name was checked
* lib: fix corruption of master-child_pid red black tree
* lib: add micro-second timers to memory allocation debugging
* core: update addattr_l to match current iproute2 code - almost
* lib: add file missing from previous commit
* all: suppress an increases alignment warning
* core: use /* FALLTHROUGH */ rather than __fallthrough;
* ipvs: resolve a "cast increases required alignment" warning
* build: don't redefine FORTIFY_SOURCE if host environment defines it
* vrrp ipvs: remove unused definition of XENFS_SUPER_MAGIC
* vrrp ipvs: fix warnings related to signedness of statfs() f_flags
* all: use correct format specifier for time fields
* bfd: make alloc_bfd() return NULL rather than false on error
* all: make min_auto_priority delay variable an unsigned
* configure: explicitly set language to C for configure
* itest: Warn if close after send not set in tcp_server for http
* test: Make tcp_server use of SO_LINGER optional
* core: remove diagnostic message accidently added in commit 7cb09b2
* vrrp ipvs: Stop setting SO_LINGER on TCP sockets
* test: update tcp_server and tcp_client
* bfd: use time_t to avoid implicit ptr type casting
* VRRP: add thread_timer_expired keyword as a synonym of timer_expired_backup
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=93
- Update service file to use manual mode as disabled is deprecated
- switch to TAG_OFFSET for a more readable version
- Update to version 2.3.1+git59.b6681f98:
* all: update how pidfile handled after reload with new configuration
* Revert "all: ensure pidfile is created if a reload causes child to start"
* Revert "all: update how pidfile handled after reload with new configuration"
* all: update how pidfile handled after reload with new configuration
* all: ensure pidfile is created if a reload causes child to start
OBS-URL: https://build.opensuse.org/request/show/1199990
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=91
* all: Ensure pid file exists when respawning child process
* vrrp: check ifindex != 0 before using the interface
* vrrp: Duplicate/drop MLDv1 listener reports on VMACs
* core: ensure only one instance of keepalived can run per config_id
* configure: add --enable-(cflags,cppflags,ldflags) options
* configure: add --enable-sanitize-(undefined,leak,memory,scudo,hwaddress) options
* vrrp: change vrrp_in_chk_vips to return bool rather than int
* core: cosmetic code layout change
* core: remove some duplicate include files
* vrrp: stop memory leak when error in configuring vrrp_iptables
(bsc#1228123) VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=89
- drop linux-4.15.patch: No longer needed as it was a backport from
upstream
- Cleanup configure options after consultation with upstream:
- --enable-regex-timers is for debugging purposes
- --enable-snmp-checker and --enable-snmp-vrrp are enabled by
--enable-snmp
- --enable-snmp-rfcv2 and --enable-snmp-rfcv3 anre enabled by
--enable-snmp-rfc
- --enable-stacktrace is definitely a debugging option
- on systems where we have nftables support we will only ship with
nftables support (>= 15.0) and use iptables support only on older
distributions.
OBS-URL: https://build.opensuse.org/request/show/877792
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=70