Accepting request 415421 from home:weberho:branches:security

Update to version 0.9.5

OBS-URL: https://build.opensuse.org/request/show/415421
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=73

fail2ban-0.9.4.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:870b99dd0110f10d705d0ca5743d42d358e0b5a0a4de8b69ed1d41b40dd98fa4
-size 335532

fail2ban-0.9.5.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:888ca1d8c5245b6f23391dd8e3b0e0a4279b682e966326a6572a330496ca8ee8
+size 342263

fail2ban.changes

@@ -1,3 +1,57 @@
+-------------------------------------------------------------------
+Mon Jul 25 13:43:18 UTC 2016 - jweberhofer@weberhofer.at
+
+- Update to version 0.9.5
+
+  New Features
+    * New Actions: action.d/firewallcmd-rich-rules and 
+      action.d/firewallcmd-rich-logging (gh#fail2ban/fail2ban#1367)
+    * New filter: slapd - ban hosts, that were failed to connect with invalid
+      credentials: error code 49 (gh#fail2ban/fail2ban#1478)
+
+  Enhancements
+    * Extreme speedup of all sqlite database operations
+        (gh#fail2ban/fail2ban#1436), by using of following sqlite options:
+      - (synchronous = OFF) write data through OS without syncing
+      - (journal_mode = MEMORY) use memory for the transaction logging
+      - (temp_store = MEMORY) temporary tables and indices are kept in memory
+    * journald journalmatch for pure-ftpd (gh#fail2ban/fail2ban#1362)
+    * Added additional regex filter for dovecot ldap authentication 
+      failures (gh#fail2ban/fail2ban#1370)
+    * filter.d/exim*conf
+      - Added additional regexes (gh#fail2ban/fail2ban#1371)
+      - Made port entry optional
+
+  Fixes
+  * filter.d/monit.conf
+    - Extended failregex with new monit "access denied" version
+      (gh#fail2ban/fail2ban#1355)
+    - failregex of previous monit version merged as single expression
+  * filter.d/postfix.conf, filter.d/postfix-sasl.conf
+    - Extended failregex daemon part, matching also postfix/smtps/smtpd now
+      (gh#fail2ban/fail2ban#1391)
+
+  * Fixed a grave bug within tags substitutions because of incorrect detection
+    of recursion in case of multiple inline substitutions of the same tag
+    (affected actions: bsd-ipfw, etc). Now tracks the actual list of the
+    already substituted tags (per tag instead of single list)
+
+  * filter.d/common.conf
+    - Unexpected extra regex-space in generic __prefix_line
+     (gh#fail2ban/fail2ban#1405)
+    - All optional spaces normalized in common.conf, test covered now
+    - Generic __prefix_line extended with optional brackets for the date ambit
+      (gh#fail2ban/fail2ban#1421), added new parameter __date_ambit 
+
+  * gentoo-initd fixed --pidfile bug: --pidfile is option of start-stop-daemon,
+    not argument of fail2ban (see gh#fail2ban/fail2ban#1434)
+
+  * filter.d/asterisk.conf
+    - Fixed security log support for PJSIP and Asterisk 13+
+      (gh#fail2ban/fail2ban#1456)
+    - Improved log support for PJSIP and Asterisk 13+ with different callID
+      (gh#fail2ban/fail2ban#1458)
+
 -------------------------------------------------------------------
 Thu Mar 10 14:09:51 UTC 2016 - jweberhofer@weberhofer.at
 

fail2ban.spec

@@ -17,7 +17,7 @@
 
 
 Name:           fail2ban
-Version:        0.9.4
+Version:        0.9.5
 Release:        0
 Summary:        Bans IP addresses that make too many authentication failures
 License:        GPL-2.0+