Ana Guerrero
fe83d67e51
Accepting request 1200053 from network
...
OBS-URL: https://build.opensuse.org/request/show/1200053
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=45
2024-09-11 14:56:18 +00:00
Peter Varkoly
0802b2cb8c
- Update service file to use manual mode as disabled is deprecated
...
- switch to TAG_OFFSET for a more readable version
- Update to version 2.3.1+git59.b6681f98:
* all: update how pidfile handled after reload with new configuration
* Revert "all: ensure pidfile is created if a reload causes child to start"
* Revert "all: update how pidfile handled after reload with new configuration"
* all: update how pidfile handled after reload with new configuration
* all: ensure pidfile is created if a reload causes child to start
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=91
2024-09-11 08:00:27 +00:00
Peter Varkoly
cfd6626909
Adapt spec
...
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=90
2024-09-11 07:17:25 +00:00
Peter Varkoly
e313ed0efc
- Update to version 2.3.1+git.1723301895.df93f341:
...
* all: Ensure pid file exists when respawning child process
* vrrp: check ifindex != 0 before using the interface
* vrrp: Duplicate/drop MLDv1 listener reports on VMACs
* core: ensure only one instance of keepalived can run per config_id
* configure: add --enable-(cflags,cppflags,ldflags) options
* configure: add --enable-sanitize-(undefined,leak,memory,scudo,hwaddress) options
* vrrp: change vrrp_in_chk_vips to return bool rather than int
* core: cosmetic code layout change
* core: remove some duplicate include files
* vrrp: stop memory leak when error in configuring vrrp_iptables
(bsc#1228123) VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=89
2024-08-14 10:35:24 +00:00
Ana Guerrero
994748be30
Accepting request 1188833 from network
...
OBS-URL: https://build.opensuse.org/request/show/1188833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=44
2024-07-22 15:18:06 +00:00
8fa3e305c5
- Update to 2.3.1
...
https://www.keepalived.org/release-notes/Release-2.3.0.html
https://www.keepalived.org/release-notes/Release-2.3.1.html
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=87
2024-07-20 18:01:34 +00:00
Ana Guerrero
8331a741ef
Accepting request 1149538 from network
...
OBS-URL: https://build.opensuse.org/request/show/1149538
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=43
2024-02-22 20:01:47 +00:00
Peter Varkoly
44b5ad0d90
Accepting request 1149335 from home:dimstar:rpm4.20:k
...
Prepare for RPM 4.20
OBS-URL: https://build.opensuse.org/request/show/1149335
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=85
2024-02-22 14:30:55 +00:00
Ana Guerrero
2b89c3a2d4
Accepting request 1144471 from network
...
OBS-URL: https://build.opensuse.org/request/show/1144471
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=42
2024-02-06 15:35:05 +00:00
Peter Varkoly
29e89ab9eb
Accepting request 1144148 from home:msmeissn:branches:network
...
- provide user(keepalived) and group(keepalived)
OBS-URL: https://build.opensuse.org/request/show/1144148
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=83
2024-02-06 07:48:07 +00:00
c485836cb0
Accepting request 1090101 from network
...
- Update to 2.2.8
https://www.keepalived.org/release-notes/Release-2.2.8.html
OBS-URL: https://build.opensuse.org/request/show/1090101
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=41
2023-06-01 15:19:34 +00:00
6c01f238f3
- Update to 2.2.8
...
https://www.keepalived.org/release-notes/Release-2.2.8.html
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=81
2023-05-31 21:34:12 +00:00
b522737d68
Accepting request 969490 from network
...
- Own /etc/keepalived/keepalived.conf as %ghost entry
otherwise upgrading the package will always move the
/etc/keepalived/keepalived.conf to
/etc/keepalived/keepalived.conf.rpmsave
- make permissions of config files more secure
OBS-URL: https://build.opensuse.org/request/show/969490
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=40
2022-04-12 19:50:58 +00:00
7c90694950
Accepting request 969479 from home:darix:branches:network
...
- Own /etc/keepalived/keepalived.conf as %ghost entry
otherwise upgrading the package will always move the
/etc/keepalived/keepalived.conf to
/etc/keepalived/keepalived.conf.rpmsave
- make permissions of config files more secure
OBS-URL: https://build.opensuse.org/request/show/969479
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=79
2022-04-12 15:17:35 +00:00
1262113d0f
Accepting request 958724 from network
...
OBS-URL: https://build.opensuse.org/request/show/958724
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=39
2022-03-03 23:17:52 +00:00
1763039223
Accepting request 957424 from home:susnux:branches:openSUSE:Factory
...
Update to 2.2.7
Fix CVE-2021-44225
OBS-URL: https://build.opensuse.org/request/show/957424
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=77
2022-03-03 10:14:32 +00:00
6fbdb37d86
Accepting request 940023 from network
...
OBS-URL: https://build.opensuse.org/request/show/940023
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=38
2021-12-12 20:27:47 +00:00
ab9aa02c4c
Accepting request 938262 from home:susnux:branches:network
...
- Update to 2.2.4
OBS-URL: https://build.opensuse.org/request/show/938262
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=76
2021-12-11 23:59:02 +00:00
d41c37e088
Accepting request 922645 from network
...
OBS-URL: https://build.opensuse.org/request/show/922645
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=37
2021-10-01 20:29:14 +00:00
880cc896f5
Accepting request 922505 from home:jsegitz:branches:systemdhardening:network
...
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
OBS-URL: https://build.opensuse.org/request/show/922505
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=75
2021-10-01 19:30:46 +00:00
f9da2a9166
Accepting request 907505 from network
...
- add 1915.patch to fix build on tumbleweed
OBS-URL: https://build.opensuse.org/request/show/907505
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=36
2021-07-21 17:06:48 +00:00
bc02180e38
- add 1915.patch to fix build on tumbleweed
...
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=74
2021-07-21 12:03:27 +00:00
cafbf3ffd5
Accepting request 893347 from network
...
OBS-URL: https://build.opensuse.org/request/show/893347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=35
2021-05-17 16:45:14 +00:00
682dc909c6
Accepting request 893166 from home:STorresi
...
Rebase the latest version with the branch submitted to SLE
OBS-URL: https://build.opensuse.org/request/show/893166
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=72
2021-05-15 19:57:11 +00:00
9e7205e5b6
Accepting request 877819 from network
...
OBS-URL: https://build.opensuse.org/request/show/877819
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=34
2021-03-10 07:57:00 +00:00
12a1e6b16e
Accepting request 877792 from home:darix:playground
...
- drop linux-4.15.patch: No longer needed as it was a backport from
upstream
- Cleanup configure options after consultation with upstream:
- --enable-regex-timers is for debugging purposes
- --enable-snmp-checker and --enable-snmp-vrrp are enabled by
--enable-snmp
- --enable-snmp-rfcv2 and --enable-snmp-rfcv3 anre enabled by
--enable-snmp-rfc
- --enable-stacktrace is definitely a debugging option
- on systems where we have nftables support we will only ship with
nftables support (>= 15.0) and use iptables support only on older
distributions.
OBS-URL: https://build.opensuse.org/request/show/877792
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=70
2021-03-08 22:15:06 +00:00
18fea341de
Accepting request 877579 from network
...
OBS-URL: https://build.opensuse.org/request/show/877579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=33
2021-03-08 14:19:16 +00:00
61fb810738
Accepting request 877448 from home:darix:playground
...
- Update to 2.2.2
https://www.keepalived.org/release-notes/Release-2.2.2.html
- change how we install documentation to avoid duplicated files
- Link all the files for ipset, iptables, libnl instead of dlopen.
Drop the previous workaround for generating requires for the
dlopen-ed libaries.
- remove unsupported configure option: --enable-libiptc
- Update to 2.2.1
OBS-URL: https://build.opensuse.org/request/show/877448
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=68
2021-03-08 08:27:20 +00:00
f4573fd565
Accepting request 874560 from network
...
OBS-URL: https://build.opensuse.org/request/show/874560
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=32
2021-02-23 19:22:00 +00:00
9df28f8932
Accepting request 873509 from home:darix:playground
...
- Make sure we pull in the libraries we need for dlopen, by
following the symlinks from the .so symlinks with the
requires_file macro.
OBS-URL: https://build.opensuse.org/request/show/873509
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=66
2021-02-23 10:40:01 +00:00
7f52197804
Accepting request 867084 from network
...
OBS-URL: https://build.opensuse.org/request/show/867084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=31
2021-01-27 17:58:16 +00:00
2a74185e89
Accepting request 866883 from home:darix:playground
...
- Update to 2.2.1
https://www.keepalived.org/release-notes/Release-2.2.1.html
https://www.keepalived.org/release-notes/Release-2.2.0.html
https://www.keepalived.org/release-notes/Release-2.1.5.html
https://www.keepalived.org/release-notes/Release-2.1.4.html
https://www.keepalived.org/release-notes/Release-2.1.3.html
https://www.keepalived.org/release-notes/Release-2.1.2.html
https://www.keepalived.org/release-notes/Release-2.1.1.html
https://www.keepalived.org/release-notes/Release-2.1.0.html
- enable systemd integration via libsystemd (new BR: libsystemd)
- switch to systemd_ordering instead of systemd_requires
- sync configure options with the configure script
OBS-URL: https://build.opensuse.org/request/show/866883
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=64
2021-01-27 08:15:46 +00:00
56898f993f
Accepting request 784642 from network
...
OBS-URL: https://build.opensuse.org/request/show/784642
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=30
2020-03-14 08:56:17 +00:00
Tomáš Chvátal
ba38832de3
Accepting request 784640 from home:namtrac:branches:network
...
Fix encoding error in changes file
OBS-URL: https://build.opensuse.org/request/show/784640
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=62
2020-03-13 13:06:52 +00:00
1fffe38a70
Accepting request 746145 from network
...
OBS-URL: https://build.opensuse.org/request/show/746145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=29
2019-11-07 22:19:52 +00:00
Tomáš Chvátal
f1aff4984c
Accepting request 746112 from home:darix:branches:network
...
- new BR pkgconfig(libnftnl) to fix nftables support
- update to 2.0.19
Fix minor IPVS features support. Extend BFD to support more than
one BFD instance with a neighnour. Extend nftable support. Script
timeout extension. Properly filter IGMP/MLD packets on VMAC
interface. Refer to ChangeLog for more infos.
https://keepalived.org/changelog.html
- changes from 2.0.18
Add support to IPVS new GUE tunnel type. New feature 'weight
reverse' available in all trackers. Resolve all outstanding
coverity issues. Some fixes and performance extensions. Refer to
ChangeLog for more infos.
https://keepalived.org/changelog.html
OBS-URL: https://build.opensuse.org/request/show/746112
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=60
2019-11-07 06:30:06 +00:00
db930178f2
Accepting request 718020 from network
...
OBS-URL: https://build.opensuse.org/request/show/718020
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=28
2019-07-24 18:34:49 +00:00
Tomáš Chvátal
260f929568
Accepting request 717976 from home:computersalat:devel:network
...
Update to 2.0.17
OBS-URL: https://build.opensuse.org/request/show/717976
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=58
2019-07-23 21:02:11 +00:00
726a95b20c
Accepting request 695462 from network
...
OBS-URL: https://build.opensuse.org/request/show/695462
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=27
2019-04-18 11:58:39 +00:00
Tomáš Chvátal
61c35f327e
Accepting request 694860 from home:darix:branches:network
...
- added systemd-after-snmp.patch:
If you want to use the snmp support the masterx socket needs be
available otherwise the snmp support is broken
strictly speaking we would need to use BindsTo= here but that
would require that add a Requires for net-snmp to the keepalived
package. to be discussed.
- update to 2.0.15
OBS-URL: https://build.opensuse.org/request/show/694860
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=56
2019-04-18 07:39:18 +00:00
96176615d2
Accepting request 691307 from network
...
OBS-URL: https://build.opensuse.org/request/show/691307
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=26
2019-04-04 10:08:16 +00:00
Lars Vogdt
d46b5a5229
Accepting request 691260 from home:darix:branches:network
...
- add buildrequires for file-devel
- used in the checker to verify scripts
- update to 2.0.14
OBS-URL: https://build.opensuse.org/request/show/691260
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=54
2019-04-03 19:17:23 +00:00
36da7b83b9
Accepting request 687165 from network
...
OBS-URL: https://build.opensuse.org/request/show/687165
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=25
2019-03-22 14:08:13 +00:00
Tomáš Chvátal
7c047fe18b
Accepting request 687065 from home:darix:branches:network
...
- update to 2.0.13
OBS-URL: https://build.opensuse.org/request/show/687065
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=52
2019-03-21 09:45:30 +00:00
1c07655e73
Accepting request 667290 from network
...
OBS-URL: https://build.opensuse.org/request/show/667290
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=24
2019-01-21 10:01:25 +00:00
Tomáš Chvátal
f638ffbd5d
Accepting request 667074 from home:darix:branches:network
...
- fix build on 42.3/sle12 by disabling http regexp check support
- add nftables to the BR
- cleanup BR support for sle11, moved almost all BR to pkgconfig
style
- disable dbus instance creation support as it is marked as
dangerous
- update to 2.0.11
OBS-URL: https://build.opensuse.org/request/show/667074
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=50
2019-01-20 09:14:28 +00:00
e6499468df
Accepting request 652407 from network
...
OBS-URL: https://build.opensuse.org/request/show/652407
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=23
2018-11-29 22:00:30 +00:00
Tomáš Chvátal
f0ed59c0a7
Accepting request 652406 from home:darix:playground
...
- update to 2.0.10
- Fix compiling on Alpine Linux.
- Stop printf compiler warning on Alpine Linux due to rlim_t.
- manpage cosmetic.
- Fix removing snmpd read threads when snmpd becomes unavailable.
- Update to support libipset version 7.
- Use ipset_printf for ipset messages so can go to log.
- When opening files for write, ensure files can only be read by
root. Issue #1048 referred to CVE-2018-19046 regarding files
used for debugging purposes could potentially be read by non
root users. This commit ensures that such log files cannot be
opened by non root users.
- Disable fopen_safe() append mode by default If a non privileged
user creates /tmp/keepalived.log and has it open for read (e.g.
tail -f), then even though keepalived will change the owner to
root and remove all read/write permissions from non owners, the
application which already has the file open will be able to
read the added log entries. Accordingly, opening a file in
append mode is disabled by default, and only enabled if
--enable-smtp-alert-debug or --enable-log-file (which are
debugging options and unset by default) are enabled. This
should further alleviate security concerns related to
CVE-2018-19046.
- vrrp: add support to constant time memcmp. Just an update to
use best practise security design pattern. While comparing
password or hmac you need to ensure comparison function is time
constant in order to figth against any timing attacks. We turn
off potential compiler optimizations for this particular
function to avoid any short circuit.
- Make sure a non privileged user cannot read keepalived file
output Ensure that when a file such as /tmp/keepalived.data is
written, no non privileged can have a previous version of that
file already open, thereby allowing them to read the data.
This should fully resolve CVE-2018-19046.
- drop b7a98f9265ffb5927c4d54c9a30726c76e65bb52.patch: included in
update
OBS-URL: https://build.opensuse.org/request/show/652406
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=48
2018-11-28 12:34:36 +00:00
Lars Vogdt
8b0ed32b30
Accepting request 648192 from home:darix:playground
...
- update to 2.0.9
OBS-URL: https://build.opensuse.org/request/show/648192
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=47
2018-11-12 10:09:35 +00:00
75f321adaf
Accepting request 602799 from network
...
OBS-URL: https://build.opensuse.org/request/show/602799
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=22
2018-05-01 21:40:51 +00:00