SHA256
1
0
forked from pool/keepalived

95 Commits

Author SHA256 Message Date
Ana Guerrero
fe83d67e51 Accepting request 1200053 from network
OBS-URL: https://build.opensuse.org/request/show/1200053
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=45
2024-09-11 14:56:18 +00:00
Peter Varkoly
0802b2cb8c - Update service file to use manual mode as disabled is deprecated
- switch to TAG_OFFSET for a more readable version

- Update to version 2.3.1+git59.b6681f98:
  * all: update how pidfile handled after reload with new configuration
  * Revert "all: ensure pidfile is created if a reload causes child to start"
  * Revert "all: update how pidfile handled after reload with new configuration"
  * all: update how pidfile handled after reload with new configuration
  * all: ensure pidfile is created if a reload causes child to start

OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=91
2024-09-11 08:00:27 +00:00
Peter Varkoly
cfd6626909 Adapt spec
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=90
2024-09-11 07:17:25 +00:00
Peter Varkoly
e313ed0efc - Update to version 2.3.1+git.1723301895.df93f341:
* all: Ensure pid file exists when respawning child process
  * vrrp: check ifindex != 0 before using the interface
  * vrrp: Duplicate/drop MLDv1 listener reports on VMACs
  * core: ensure only one instance of keepalived can run per config_id
  * configure: add --enable-(cflags,cppflags,ldflags) options
  * configure: add --enable-sanitize-(undefined,leak,memory,scudo,hwaddress) options
  * vrrp: change vrrp_in_chk_vips to return bool rather than int
  * core: cosmetic code layout change
  * core: remove some duplicate include files
  * vrrp: stop memory leak when error in configuring vrrp_iptables
    (bsc#1228123) VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler

OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=89
2024-08-14 10:35:24 +00:00
Ana Guerrero
994748be30 Accepting request 1188833 from network
OBS-URL: https://build.opensuse.org/request/show/1188833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=44
2024-07-22 15:18:06 +00:00
8fa3e305c5 - Update to 2.3.1
https://www.keepalived.org/release-notes/Release-2.3.0.html
  https://www.keepalived.org/release-notes/Release-2.3.1.html

OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=87
2024-07-20 18:01:34 +00:00
Ana Guerrero
8331a741ef Accepting request 1149538 from network
OBS-URL: https://build.opensuse.org/request/show/1149538
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=43
2024-02-22 20:01:47 +00:00
Peter Varkoly
44b5ad0d90 Accepting request 1149335 from home:dimstar:rpm4.20:k
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1149335
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=85
2024-02-22 14:30:55 +00:00
Ana Guerrero
2b89c3a2d4 Accepting request 1144471 from network
OBS-URL: https://build.opensuse.org/request/show/1144471
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=42
2024-02-06 15:35:05 +00:00
Peter Varkoly
29e89ab9eb Accepting request 1144148 from home:msmeissn:branches:network
- provide user(keepalived) and group(keepalived)

OBS-URL: https://build.opensuse.org/request/show/1144148
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=83
2024-02-06 07:48:07 +00:00
c485836cb0 Accepting request 1090101 from network
- Update to 2.2.8
  https://www.keepalived.org/release-notes/Release-2.2.8.html

OBS-URL: https://build.opensuse.org/request/show/1090101
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=41
2023-06-01 15:19:34 +00:00
6c01f238f3 - Update to 2.2.8
https://www.keepalived.org/release-notes/Release-2.2.8.html

OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=81
2023-05-31 21:34:12 +00:00
b522737d68 Accepting request 969490 from network
- Own /etc/keepalived/keepalived.conf as %ghost entry
  otherwise upgrading the package will always move the
  /etc/keepalived/keepalived.conf to
  /etc/keepalived/keepalived.conf.rpmsave
- make permissions of config files more secure

OBS-URL: https://build.opensuse.org/request/show/969490
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=40
2022-04-12 19:50:58 +00:00
7c90694950 Accepting request 969479 from home:darix:branches:network
- Own /etc/keepalived/keepalived.conf as %ghost entry
  otherwise upgrading the package will always move the
  /etc/keepalived/keepalived.conf to
  /etc/keepalived/keepalived.conf.rpmsave
- make permissions of config files more secure

OBS-URL: https://build.opensuse.org/request/show/969479
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=79
2022-04-12 15:17:35 +00:00
1262113d0f Accepting request 958724 from network
OBS-URL: https://build.opensuse.org/request/show/958724
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=39
2022-03-03 23:17:52 +00:00
1763039223 Accepting request 957424 from home:susnux:branches:openSUSE:Factory
Update to 2.2.7
Fix CVE-2021-44225

OBS-URL: https://build.opensuse.org/request/show/957424
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=77
2022-03-03 10:14:32 +00:00
6fbdb37d86 Accepting request 940023 from network
OBS-URL: https://build.opensuse.org/request/show/940023
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=38
2021-12-12 20:27:47 +00:00
ab9aa02c4c Accepting request 938262 from home:susnux:branches:network
- Update to 2.2.4

OBS-URL: https://build.opensuse.org/request/show/938262
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=76
2021-12-11 23:59:02 +00:00
d41c37e088 Accepting request 922645 from network
OBS-URL: https://build.opensuse.org/request/show/922645
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=37
2021-10-01 20:29:14 +00:00
880cc896f5 Accepting request 922505 from home:jsegitz:branches:systemdhardening:network
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/922505
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=75
2021-10-01 19:30:46 +00:00
f9da2a9166 Accepting request 907505 from network
- add 1915.patch to fix build on tumbleweed

OBS-URL: https://build.opensuse.org/request/show/907505
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=36
2021-07-21 17:06:48 +00:00
bc02180e38 - add 1915.patch to fix build on tumbleweed
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=74
2021-07-21 12:03:27 +00:00
cafbf3ffd5 Accepting request 893347 from network
OBS-URL: https://build.opensuse.org/request/show/893347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=35
2021-05-17 16:45:14 +00:00
682dc909c6 Accepting request 893166 from home:STorresi
Rebase the latest version with the branch submitted to SLE

OBS-URL: https://build.opensuse.org/request/show/893166
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=72
2021-05-15 19:57:11 +00:00
9e7205e5b6 Accepting request 877819 from network
OBS-URL: https://build.opensuse.org/request/show/877819
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=34
2021-03-10 07:57:00 +00:00
12a1e6b16e Accepting request 877792 from home:darix:playground
- drop linux-4.15.patch: No longer needed as it was a backport from
  upstream
- Cleanup configure options after consultation with upstream:
  - --enable-regex-timers is for debugging purposes
  - --enable-snmp-checker and --enable-snmp-vrrp are enabled by
    --enable-snmp
  - --enable-snmp-rfcv2 and --enable-snmp-rfcv3 anre enabled by
    --enable-snmp-rfc
  - --enable-stacktrace is definitely a debugging option
- on systems where we have nftables support we will only ship with
  nftables support (>= 15.0) and use iptables support only on older
  distributions.

OBS-URL: https://build.opensuse.org/request/show/877792
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=70
2021-03-08 22:15:06 +00:00
18fea341de Accepting request 877579 from network
OBS-URL: https://build.opensuse.org/request/show/877579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=33
2021-03-08 14:19:16 +00:00
61fb810738 Accepting request 877448 from home:darix:playground
- Update to 2.2.2
  https://www.keepalived.org/release-notes/Release-2.2.2.html
- change how we install documentation to avoid duplicated files
- Link all the files for ipset, iptables, libnl instead of dlopen.
  Drop the previous workaround for generating requires for the
  dlopen-ed libaries.
- remove unsupported configure option: --enable-libiptc

- Update to 2.2.1

OBS-URL: https://build.opensuse.org/request/show/877448
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=68
2021-03-08 08:27:20 +00:00
f4573fd565 Accepting request 874560 from network
OBS-URL: https://build.opensuse.org/request/show/874560
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=32
2021-02-23 19:22:00 +00:00
9df28f8932 Accepting request 873509 from home:darix:playground
- Make sure we pull in the libraries we need for dlopen, by
  following the symlinks from the .so symlinks with the
  requires_file macro.

OBS-URL: https://build.opensuse.org/request/show/873509
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=66
2021-02-23 10:40:01 +00:00
7f52197804 Accepting request 867084 from network
OBS-URL: https://build.opensuse.org/request/show/867084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=31
2021-01-27 17:58:16 +00:00
2a74185e89 Accepting request 866883 from home:darix:playground
- Update to 2.2.1 
  https://www.keepalived.org/release-notes/Release-2.2.1.html
  https://www.keepalived.org/release-notes/Release-2.2.0.html
  https://www.keepalived.org/release-notes/Release-2.1.5.html
  https://www.keepalived.org/release-notes/Release-2.1.4.html
  https://www.keepalived.org/release-notes/Release-2.1.3.html
  https://www.keepalived.org/release-notes/Release-2.1.2.html
  https://www.keepalived.org/release-notes/Release-2.1.1.html
  https://www.keepalived.org/release-notes/Release-2.1.0.html
- enable systemd integration via libsystemd (new BR: libsystemd)
- switch to systemd_ordering instead of systemd_requires
- sync configure options with the configure script

OBS-URL: https://build.opensuse.org/request/show/866883
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=64
2021-01-27 08:15:46 +00:00
56898f993f Accepting request 784642 from network
OBS-URL: https://build.opensuse.org/request/show/784642
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=30
2020-03-14 08:56:17 +00:00
Tomáš Chvátal
ba38832de3 Accepting request 784640 from home:namtrac:branches:network
Fix encoding error in changes file

OBS-URL: https://build.opensuse.org/request/show/784640
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=62
2020-03-13 13:06:52 +00:00
1fffe38a70 Accepting request 746145 from network
OBS-URL: https://build.opensuse.org/request/show/746145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=29
2019-11-07 22:19:52 +00:00
Tomáš Chvátal
f1aff4984c Accepting request 746112 from home:darix:branches:network
- new BR pkgconfig(libnftnl) to fix nftables support

- update to 2.0.19
  Fix minor IPVS features support. Extend BFD to support more than
  one BFD instance with a neighnour. Extend nftable support. Script
  timeout extension. Properly filter IGMP/MLD packets on VMAC
  interface. Refer to ChangeLog for more infos.
  https://keepalived.org/changelog.html
- changes from 2.0.18
  Add support to IPVS new GUE tunnel type. New feature 'weight
  reverse' available in all trackers. Resolve all outstanding
  coverity issues. Some fixes and performance extensions. Refer to
  ChangeLog for more infos.
  https://keepalived.org/changelog.html

OBS-URL: https://build.opensuse.org/request/show/746112
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=60
2019-11-07 06:30:06 +00:00
db930178f2 Accepting request 718020 from network
OBS-URL: https://build.opensuse.org/request/show/718020
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=28
2019-07-24 18:34:49 +00:00
Tomáš Chvátal
260f929568 Accepting request 717976 from home:computersalat:devel:network
Update to 2.0.17

OBS-URL: https://build.opensuse.org/request/show/717976
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=58
2019-07-23 21:02:11 +00:00
726a95b20c Accepting request 695462 from network
OBS-URL: https://build.opensuse.org/request/show/695462
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=27
2019-04-18 11:58:39 +00:00
Tomáš Chvátal
61c35f327e Accepting request 694860 from home:darix:branches:network
- added systemd-after-snmp.patch:
  If you want to use the snmp support the masterx socket needs be
  available otherwise the snmp support is broken
  strictly speaking we would need to use BindsTo= here but that
  would require that add a Requires for net-snmp to the keepalived
  package. to be discussed.

- update to 2.0.15

OBS-URL: https://build.opensuse.org/request/show/694860
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=56
2019-04-18 07:39:18 +00:00
96176615d2 Accepting request 691307 from network
OBS-URL: https://build.opensuse.org/request/show/691307
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=26
2019-04-04 10:08:16 +00:00
Lars Vogdt
d46b5a5229 Accepting request 691260 from home:darix:branches:network
- add buildrequires for file-devel
  - used in the checker to verify scripts

- update to 2.0.14

OBS-URL: https://build.opensuse.org/request/show/691260
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=54
2019-04-03 19:17:23 +00:00
36da7b83b9 Accepting request 687165 from network
OBS-URL: https://build.opensuse.org/request/show/687165
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=25
2019-03-22 14:08:13 +00:00
Tomáš Chvátal
7c047fe18b Accepting request 687065 from home:darix:branches:network
- update to 2.0.13

OBS-URL: https://build.opensuse.org/request/show/687065
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=52
2019-03-21 09:45:30 +00:00
1c07655e73 Accepting request 667290 from network
OBS-URL: https://build.opensuse.org/request/show/667290
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=24
2019-01-21 10:01:25 +00:00
Tomáš Chvátal
f638ffbd5d Accepting request 667074 from home:darix:branches:network
- fix build on 42.3/sle12 by disabling http regexp check support
- add nftables to the BR
- cleanup BR support for sle11, moved almost all BR to pkgconfig
  style
- disable dbus instance creation support as it is marked as
  dangerous

- update to 2.0.11

OBS-URL: https://build.opensuse.org/request/show/667074
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=50
2019-01-20 09:14:28 +00:00
e6499468df Accepting request 652407 from network
OBS-URL: https://build.opensuse.org/request/show/652407
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=23
2018-11-29 22:00:30 +00:00
Tomáš Chvátal
f0ed59c0a7 Accepting request 652406 from home:darix:playground
- update to 2.0.10
  - Fix compiling on Alpine Linux.
  - Stop printf compiler warning on Alpine Linux due to rlim_t. 
  - manpage cosmetic.
  - Fix removing snmpd read threads when snmpd becomes unavailable.
  - Update to support libipset version 7.
  - Use ipset_printf for ipset messages so can go to log. 
  - When opening files for write, ensure files can only be read by
    root.  Issue #1048 referred to CVE-2018-19046 regarding files
    used for debugging purposes could potentially be read by non
    root users.  This commit ensures that such log files cannot be
    opened by non root users.
  - Disable fopen_safe() append mode by default If a non privileged
    user creates /tmp/keepalived.log and has it open for read (e.g.
    tail -f), then even though keepalived will change the owner to
    root and remove all read/write permissions from non owners, the
    application which already has the file open will be able to
    read the added log entries.  Accordingly, opening a file in
    append mode is disabled by default, and only enabled if
    --enable-smtp-alert-debug or --enable-log-file (which are
    debugging options and unset by default) are enabled.  This
    should further alleviate security concerns related to
    CVE-2018-19046.
  - vrrp: add support to constant time memcmp.  Just an update to
    use best practise security design pattern. While comparing
    password or hmac you need to ensure comparison function is time
    constant in order to figth against any timing attacks. We turn
    off potential compiler optimizations for this particular
    function to avoid any short circuit.
  - Make sure a non privileged user cannot read keepalived file
    output Ensure that when a file such as /tmp/keepalived.data is
    written, no non privileged can have a previous version of that
    file already open, thereby allowing them to read the data.
    This should fully resolve CVE-2018-19046.
- drop b7a98f9265ffb5927c4d54c9a30726c76e65bb52.patch: included in
  update

OBS-URL: https://build.opensuse.org/request/show/652406
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=48
2018-11-28 12:34:36 +00:00
Lars Vogdt
8b0ed32b30 Accepting request 648192 from home:darix:playground
- update to 2.0.9

OBS-URL: https://build.opensuse.org/request/show/648192
OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=47
2018-11-12 10:09:35 +00:00
75f321adaf Accepting request 602799 from network
OBS-URL: https://build.opensuse.org/request/show/602799
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepalived?expand=0&rev=22
2018-05-01 21:40:51 +00:00