Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sshguard for openSUSE:Factory checked in at 2023-11-07 21:28:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sshguard (Old) and /work/SRC/openSUSE:Factory/.sshguard.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sshguard" Tue Nov 7 21:28:13 2023 rev:18 rq:1123983 version:2.4.3 Changes: -------- --- /work/SRC/openSUSE:Factory/sshguard/sshguard.changes 2022-08-31 18:09:03.815387453 +0200 +++ /work/SRC/openSUSE:Factory/.sshguard.new.17445/sshguard.changes 2023-11-07 21:29:08.497662784 +0100 @@ -1,0 +2,17 @@ +Mon Oct 2 07:24:19 UTC 2023 - Andrea Manzini <[email protected]> + +- update to version 2.4.3: + * Add signature for BIND + * Add signature for Gitea + * Add signature for Microsoft SQL Server for Linux + * Add signature for OpenVPN Portshare + * Add signature for user-defined HTTP attacks + * Update signatures for Dovecot + * Update signatures for Postfix + * Fixed Fix memset off-by-one + * Fixed Resolve DNS names in capability mode using casper + +- removed patch sshguard-overflow.patch as fixed in upstream +- clean up .spec file + +------------------------------------------------------------------- Old: ---- sshguard-2.4.2.tar.gz sshguard-overflow.patch New: ---- sshguard-2.4.3.tar.gz BETA DEBUG BEGIN: Old: - removed patch sshguard-overflow.patch as fixed in upstream - clean up .spec file BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sshguard.spec ++++++ --- /var/tmp/diff_new_pack.LAXR6H/_old 2023-11-07 21:29:09.229689740 +0100 +++ /var/tmp/diff_new_pack.LAXR6H/_new 2023-11-07 21:29:09.229689740 +0100 @@ -1,7 +1,7 @@ # # spec file for package sshguard # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,15 +20,11 @@ %if ! %{defined _fillupdir} %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif -%if 0%{?suse_version} > 1140 %define has_systemd 1 BuildRequires: pkgconfig(systemd) %{?systemd_requires} -%else -Requires(pre): %fillup_prereq -%endif Name: sshguard -Version: 2.4.2 +Version: 2.4.3 Release: 0 Summary: SSH brute force attack protector License: ISC @@ -42,7 +38,6 @@ # PATCH-FIX-UPSTREAM sshguard-gcc5.patch Patch0: sshguard-gcc5.patch Patch1: harden_sshguard.service.patch -Patch2: sshguard-overflow.patch Requires: openssh Requires(pre): %fillup_prereq @@ -52,65 +47,42 @@ attacker's address with a firewall rule. %prep -%setup -q -%patch0 -p1 -find . -type f -iname "*.swp" -print -exec rm {} \; -%patch1 -p1 -%patch2 -p1 +%autosetup -p1 %build %configure \ --with-firewall=iptables \ --with-iptables=%{_sbindir}/iptables -make %{?_smp_mflags} +%make_build %install %make_install install -D -m0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/%{name}.conf sed -i "s|BACKEND=.*$|BACKEND=\"%{_libexecdir}/sshg-fw-firewalld\"|g" %{buildroot}%{_sysconfdir}/%{name}.conf -%if 0%{?has_systemd} ln -sf service %{buildroot}/%{_sbindir}/rc%{name} install -D -m0644 %{SOURCE2} %{buildroot}%{_unitdir}/sshguard.service -%else -install -D -m0744 %{SOURCE3} %{buildroot}%{_sysconfdir}/init.d/sshguard -ln -s ../..%{_sysconfdir}/init.d/sshguard %{buildroot}%{_sbindir}/rcsshguard -%endif install -d -m0755 %{buildroot}%{_sysconfdir}/%{name} install -D -m0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/%{name}/whitelist install -d -m0755 %{buildroot}%{_localstatedir}/lib/%{name}/db %fillup_and_insserv %pre -%if 0%{?has_systemd} %service_add_pre %{name}.service -%endif %post -%if 0%{?has_systemd} %fillup_only sshguard %service_add_post %{name}.service -%else -%fillup_and_insserv %{name} -%endif %preun -%if 0%{?has_systemd} %service_del_preun %{name}.service -%else -%stop_on_removal %{name} -%endif %postun -%if 0%{?has_systemd} %service_del_postun %{name}.service -%else -%restart_on_update %{name} -%insserv_cleanup -%endif %files %if 0%{?suse_version} < 1330 -%doc CHANGELOG.rst README.rst examples/ doc/ COPYING +%license COPYING +%doc CHANGELOG.rst README.rst examples/ doc/ %else %doc CHANGELOG.rst README.rst examples/ doc/ %license COPYING ++++++ harden_sshguard.service.patch ++++++ --- /var/tmp/diff_new_pack.LAXR6H/_old 2023-11-07 21:29:09.253690624 +0100 +++ /var/tmp/diff_new_pack.LAXR6H/_new 2023-11-07 21:29:09.253690624 +0100 @@ -1,7 +1,7 @@ -Index: sshguard-2.4.2/examples/sshguard.service +Index: sshguard-2.4.3/examples/sshguard.service =================================================================== ---- sshguard-2.4.2.orig/examples/sshguard.service -+++ sshguard-2.4.2/examples/sshguard.service +--- sshguard-2.4.3.orig/examples/sshguard.service ++++ sshguard-2.4.3/examples/sshguard.service @@ -9,6 +9,19 @@ After=libvirtd.service After=firewalld.service ++++++ sshguard-2.4.2.tar.gz -> sshguard-2.4.3.tar.gz ++++++ ++++ 221133 lines of diff (skipped) ++++++ sshguard-gcc5.patch ++++++ --- /var/tmp/diff_new_pack.LAXR6H/_old 2023-11-07 21:29:09.617704029 +0100 +++ /var/tmp/diff_new_pack.LAXR6H/_new 2023-11-07 21:29:09.621704176 +0100 @@ -1,14 +1,13 @@ -diff -crB sshguard-2.3.1/src/blocker/sshguard_whitelist.c sshguard-2.3.1-dev/src/blocker/sshguard_whitelist.c -*** sshguard-2.3.1/src/blocker/sshguard_whitelist.c 2018-12-16 03:41:51.000000000 +0100 ---- sshguard-2.3.1/src/blocker/sshguard_whitelist.c 2019-01-24 09:34:29.600313298 +0100 -*************** -*** 18,23 **** ---- 18,24 ---- - * SSHGuard. See http://www.sshguard.net - */ - -+ #define _GNU_SOURCE - #include <arpa/inet.h> - #include <assert.h> - #include <netdb.h> +Index: sshguard-2.4.3/src/blocker/sshguard_whitelist.c +=================================================================== +--- sshguard-2.4.3.orig/src/blocker/sshguard_whitelist.c ++++ sshguard-2.4.3/src/blocker/sshguard_whitelist.c +@@ -18,6 +18,7 @@ + * SSHGuard. See http://www.sshguard.net + */ + ++#define _GNU_SOURCE + #include <arpa/inet.h> + #include <assert.h> + #include <netdb.h>
