Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package keepalived for openSUSE:Factory checked in at 2022-03-04 00:17:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/keepalived (Old) and /work/SRC/openSUSE:Factory/.keepalived.new.1958 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "keepalived" Fri Mar 4 00:17:52 2022 rev:39 rq:958724 version:2.2.7 Changes: -------- --- /work/SRC/openSUSE:Factory/keepalived/keepalived.changes 2021-12-12 21:28:32.124374450 +0100 +++ /work/SRC/openSUSE:Factory/.keepalived.new.1958/keepalived.changes 2022-03-04 00:18:38.752297939 +0100 @@ -1,0 +2,34 @@ +Thu Feb 24 18:36:08 UTC 2022 - Ferdinand Thiessen <r...@fthiessen.de> + +- Update to 2.2.7 + * Fix CVE-2021-44225: The D-Bus policy does not sufficiently + restrict the message destination, allowing any user to inspect + and manipulate any property. + * New features: + * global: Don???t assume running as user root. + * ipvs: Add support to twos scheduler. + * vrrp: New features: + * Add vrf option for unicast without specifying an interface. + * Add option unicast_fault_no_peer. + * Allow specification of multicast address to be used. + * Add vrf option to static and vrrp routes. + * Add option to resend vrrp states on fifos after reload. + * Allow duplication of VRIDs on an interface with unicast peers. + * systemd: Add keepalived-non-root.service systemd service file. + * make BFD work when IPv6 disabled on system. + * Fix calculating CLOCK_REALTIME and CLOCK_MONOTONIC offsets. + * bfd: Handle interface down/address missing when keepalived starts. + This resolves a segfault, and also makes bfd retry once per minute + to create send socket if it cannot do so due to no address to bind + to on an interface. + * vrrp: + * Fix configured IPv6 multicast addresses with VMACs. + * Don???t segfault if duplicate VMAC name, but ignore second name. + * Don???t delete and recreate VMAC on reload if only VRID has changed. + * Don???t segfault if don???t have permission for ARP/NDISC socket. + * Fix IPv6 with vmac_xmit_base. + * Fix disabling vmac-xmit-base with VRRPv3 IPv6 use_vmac. + * Fix specifying user/group for vrrp_scripts. + * Various other fixes and improvements + +------------------------------------------------------------------- Old: ---- keepalived-2.2.4.tar.gz New: ---- keepalived-2.2.7.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ keepalived.spec ++++++ --- /var/tmp/diff_new_pack.WWDNKd/_old 2022-03-04 00:18:39.448298086 +0100 +++ /var/tmp/diff_new_pack.WWDNKd/_new 2022-03-04 00:18:39.452298087 +0100 @@ -1,7 +1,7 @@ # # spec file for package keepalived # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -38,13 +38,13 @@ %bcond_without systemd Name: keepalived -Version: 2.2.4 +Version: 2.2.7 Release: 0 Summary: A keepalive facility for Linux License: GPL-2.0-or-later Group: Productivity/Networking/Routing -URL: http://www.keepalived.org/ -Source: http://www.keepalived.org/software/%{name}-%{version}.tar.gz +URL: https://www.keepalived.org/ +Source: https://www.keepalived.org/software/%{name}-%{version}.tar.gz Source2: keepalive-rpmlintrc Patch0: keepalive-init.patch Patch1: harden_keepalived.service.patch @@ -208,8 +208,8 @@ %doc %{_defaultdocdir}/%{name}/ %dir %{_sysconfdir}/keepalived %dir %attr(-,keepalived,keepalived) %{_var}/lib/%{name} +%config %{_sysconfdir}/keepalived/keepalived.conf.sample %{_fillupdir}/sysconfig.%{name} -%config(noreplace) %{_sysconfdir}/keepalived/*conf %{_bindir}/genhash %{_sbindir}/rckeepalived %{_sbindir}/keepalived ++++++ keepalived-2.2.4.tar.gz -> keepalived-2.2.7.tar.gz ++++++ ++++ 16710 lines of diff (skipped)