Hello community, here is the log from the commit of package stunnel for openSUSE:Factory checked in at 2019-09-17 13:39:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/stunnel (Old) and /work/SRC/openSUSE:Factory/.stunnel.new.7948 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "stunnel" Tue Sep 17 13:39:00 2019 rev:15 rq:731260 version:5.55 Changes: -------- --- /work/SRC/openSUSE:Factory/stunnel/stunnel.changes 2019-02-26 22:19:47.702121646 +0100 +++ /work/SRC/openSUSE:Factory/.stunnel.new.7948/stunnel.changes 2019-09-17 13:39:01.785827355 +0200 @@ -1,0 +2,44 @@ +Fri Sep 13 14:49:32 UTC 2019 - Vítězslav Čížek <[email protected]> + +- Install the correct file as README.openSUSE (bsc#1150730) + * stunnel.keyring was accidentally installed instead + +------------------------------------------------------------------- +Fri Sep 13 13:02:46 UTC 2019 - Vítězslav Čížek <[email protected]> + +- update to version 5.55 + New features + New "ticketKeySecret" and "ticketMacSecret" options to control confidentiality + and integrity protection of the issued session tickets. These options allow for + session resumption on other nodes in a cluster. + Logging of the assigned bind address instead of the requested bind address. + Check whether "output" is not a relative file name. + Added sslVersion, sslVersionMin and sslVersionMax for OpenSSL 1.1.0 and later. + Hexadecimal PSK keys are automatically converted to binary. + Session ticket support (requires OpenSSL 1.1.1 or later). "connect" address + persistence is currently unsupported with session tickets. + SMTP HELO before authentication (thx to Jacopo Giudici). + New "curves" option to control the list of elliptic curves in OpenSSL 1.1.0 and later. + New "ciphersuites" option to control the list of permitted TLS 1.3 ciphersuites. + Include file name and line number in OpenSSL errors. + Compatibility with the current OpenSSL 3.0.0-dev branch. + Better performance with SSL_set_read_ahead()/SSL_pending(). + Bugfixes + A number of testing framework fixes and improvements. + Service threads are terminated before OpenSSL cleanup to prevent occasional stunnel crashes at shutdown. + Fixed data transfer stalls introduced in stunnel 5.51. + Fixed a transfer() loop bug introduced in stunnel 5.51. + Fixed PSKsecrets as a global option (thx to Teodor Robas). + Fixed a memory allocation bug (thx to matanfih). + Fixed PSK session resumption with TLS 1.3. + Fixed a memory leak in the WIN32 logging subsystem. + Allow for zero value (ignored) TLS options. + Partially refactored configuration file parsing and logging subsystems for clearer code and minor bugfixes. + Caveats + We removed FIPS support from our standard builds. FIPS will still be available with custom builds. +- drop stunnel-listenqueue-option.patch + Its original purpose (from bsc#674554) was to allow setting a higher + backlog value for listen(). As that value was raised to SOMAXCONN + years ago (in 4.36), we don't need it anymore + +------------------------------------------------------------------- Old: ---- stunnel-5.49.tar.gz stunnel-5.49.tar.gz.asc stunnel-listenqueue-option.patch New: ---- stunnel-5.55.tar.gz stunnel-5.55.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ stunnel.spec ++++++ --- /var/tmp/diff_new_pack.ta0coj/_old 2019-09-17 13:39:02.477827245 +0200 +++ /var/tmp/diff_new_pack.ta0coj/_new 2019-09-17 13:39:02.477827245 +0200 @@ -38,7 +38,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: stunnel -Version: 5.49 +Version: 5.55 Release: 0 Summary: Universal SSL Tunnel License: GPL-2.0-or-later @@ -52,7 +52,6 @@ Source5: stunnel.service Source6: stunnel.conf Source7: stunnel.README -Patch0: stunnel-listenqueue-option.patch BuildRequires: libopenssl-devel BuildRequires: tcpd-devel BuildRequires: zlib-devel @@ -86,7 +85,6 @@ %prep %setup -q -n stunnel-%{version} -%patch0 -p1 chmod -x %{_builddir}/stunnel-%{version}/tools/ca.* chmod -x %{_builddir}/stunnel-%{version}/tools/importCA.* @@ -112,7 +110,7 @@ %endif cp -p %{SOURCE1} tools/stunnel.conf-sample.%{VENDORAFFIX} -cp -p %{SOURCE2} README.%{VENDORAFFIX} +cp -p %{SOURCE7} README.%{VENDORAFFIX} mkdir -p %{buildroot}%{_fillupdir} cp -p %{SOURCE3} %{buildroot}%{_fillupdir}/ %if 0%{?has_systemd} ++++++ stunnel-5.49.tar.gz -> stunnel-5.55.tar.gz ++++++ ++++ 24264 lines of diff (skipped)
