Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package keepalived for openSUSE:Factory checked in at 2026-07-28 17:50:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/keepalived (Old) and /work/SRC/openSUSE:Factory/.keepalived.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "keepalived" Tue Jul 28 17:50:52 2026 rev:50 rq:1367669 version:2.4.3+git0.53701f56 Changes: -------- --- /work/SRC/openSUSE:Factory/keepalived/keepalived.changes 2026-04-16 17:27:10.111921842 +0200 +++ /work/SRC/openSUSE:Factory/.keepalived.new.2004/keepalived.changes 2026-07-28 17:52:13.504546167 +0200 @@ -1,0 +2,95 @@ +Thu Jul 23 15:51:50 UTC 2026 - Marcus Rueckert <[email protected]> + +- Remove unused sha1 configure option + +------------------------------------------------------------------- +Thu Jul 23 15:42:27 UTC 2026 - Marcus Rueckert <[email protected]> + +- do not delete the file which is now read in the reproducible + build case + +------------------------------------------------------------------- +Mon Jul 20 22:25:41 UTC 2026 - Marcus Rueckert <[email protected]> + +- Fix sysusers support +- Use reproducible build support + +------------------------------------------------------------------- +Mon Jul 20 22:17:30 UTC 2026 - Marcus Rueckert <[email protected]> + +- Update to version 2.4.3+git0.53701f56: + https://www.keepalived.org/release-notes/Release-2.4.3/ + https://www.keepalived.org/release-notes/Release-2.4.2/ + https://www.keepalived.org/release-notes/Release-2.4.1/ + https://www.keepalived.org/release-notes/Release-2.4.0/ + + * test: pin auth_hmac fixed wire vectors and widen negative coverage + * vrrp: expire an auth_hmac replay mark outside the freshness window + * vrrp: recover the auth_hmac sequence after a corrected clock step + * vrrp: sign the auth_hmac trailer once per advertisement + * www: rework the auth_hmac rollout around receive-only + * test: add an auth_hmac wire image regression test + * vrrp: add auth_hmac receive-only mode + * vrrp: read the VRRP checksum as zero in the auth_hmac input + * vrrp: align auth_hmac with the IETF draft + * www: fix download location + * vrrp: raise the auth_hmac key minimum to 32 bytes + * vrrp: add a systemd credential drop-in sample for auth_hmac keys + * vrrp: drop stale adverts before the auth_hmac digest + * vrrp: allow auth_hmac keys to be loaded from a file + * vrrp: reserve the auth_hmac trailer in the advert MTU budget + * vrrp: document the auth_hmac extension + * vrrp: report authentication extension counters + * vrrp: sign and verify adverts with the auth extension + * vrrp: parse and validate the auth_hmac extension + * vrrp: add HMAC authentication extension module + * parser: fix ${NAME param} substitution when trailing text follows + * dbus: deny keepalived methods by default + * check: set CLOEXEC on the IPVS netlink socket + * track_process: bound the /proc stat parse + * smtp: clamp the alert body offset + * netlink: require kernel origin and order the error length check + * notify: validate resolved symlink target and notify fifo + * vrrp: use a local ifreq for the ethtool link probe + * netlink: log an oversized broadcast address instead of dropping it + * vrrp: drop redundant always-true comparison in SNMP walk + * tools: close files via context manager in json_tracking + * vrrp: avoid sizeof on the side-effecting PTR_CAST macro + * check: fix stack buffer overflow in set_ping_group_range + * github: bump codeql-action to v4 + * github: build keepalived explicitly for CodeQL + * doc: remove coverity related + * doc: Update global README.md + * www: Modernize keepalived.org website using Material for MkDocs + * doc: remove Sphinx documentation and its build dependencies + * Check PATH_MAX when resolving track file paths + * Resolve warnings and errors identified by gcc 16 + * configure.ac: avoid bash substring expansion + * configure.ac: use command -v instead of type -p + * configure.ac: use the = test operator, not == + * configure.ac: use printf instead of echo -e + * configure.ac: use add_to_var instead of += to append + * snmp: reject an out of range instance index + * vrrp: report notify FIFO write errors + * vrrp: bound interface name copies + * vrrp: validate the BFD event pipe read length + * vrrp: warn when iptables rules cannot be applied + * vrrp: remove VMAC firewall rules before deleting the link + * vrrp: mask the authentication password in dump and JSON output + * netlink: bound attribute access in the RX filters + * dbus: validate the object path and narrow the CreateInstance vrid + * parser: keep the full 64-bit value in read_unsigned64 + * json: correct string escaping and tolerate a NULL string + * vrrp: bound hardware address length in the ARP and NDP senders + * vrrp: handle EVP allocation failure and wipe HMAC key material + * vrrp: validate VRRPv2 password against the checked length + * memory: abort on OOM in STRDUP, STRNDUP and REALLOC + * notify: harden script execution environment and quoting + * vrrp: reset rate-limit flags only after accepting a packet + * check: fix MD5 context leak and DNS length check + * config: fix invalid free and SIGFPE in builtin definitions + * check: resolve heap overflow in HTTP regex partial match + * snmp: fix operator precedence + * build: make OpenSSL pkg-config flags drive header checks and link flags + +------------------------------------------------------------------- Old: ---- keepalived-2.3.4+git23.b3631012.tar.xz New: ---- keepalived-2.4.3+git0.53701f56.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ keepalived.spec ++++++ --- /var/tmp/diff_new_pack.vTFHna/_old 2026-07-28 17:52:15.016599038 +0200 +++ /var/tmp/diff_new_pack.vTFHna/_new 2026-07-28 17:52:15.020599178 +0200 @@ -35,9 +35,10 @@ %bcond_with keepalived_regex %endif %bcond_without json +%bcond_without reproducible_build Name: keepalived -Version: 2.3.4+git23.b3631012 +Version: 2.4.3+git0.53701f56 Release: 0 Summary: A keepalive facility for Linux License: GPL-2.0-or-later @@ -107,6 +108,9 @@ %configure \ --disable-silent-rules \ --docdir=%{_defaultdocdir}/%{name}/ \ +%if %{with reproducible_build} + --enable-reproducible-build \ +%endif --enable-bfd \ %if %{with json} --enable-json \ @@ -129,7 +133,6 @@ --enable-systemd \ --with-init=systemd \ --with-systemdsystemunitdir="%{_unitdir}" \ - --enable-sha1 \ --enable-gnu-std-paths \ --enable-hardening \ --enable-log-file \ @@ -141,8 +144,8 @@ --enable-libnl \ --with-iproute-etc-dir=%{_sysconfdir}/iproute2 \ --enable-json -make %{?_smp_mflags} -%sysusers_generate_pre %{SOURCE12} %{name} %{S:4} +%make_build +%sysusers_generate_pre %{SOURCE4} %{name} %{name}.conf %install %make_install @@ -158,7 +161,12 @@ %{buildroot}%{_defaultdocdir}/%{name}/ mkdir -p %{buildroot}%{_tmpfilesdir}/ -install -D -m 0644 %{S:3} %{buildroot}%{_tmpfilesdir}/%{name}.conf +install -D -m 0644 %{SOURCE3} %{buildroot}%{_tmpfilesdir}/%{name}.conf +install -D -m 0644 %{SOURCE4} %{buildroot}%{_sysusersdir}/%{name}.conf + +%if %{without reproducible_build} +rm -fv %{buildroot}/etc/keepalived/keepalived.config-opts +%endif %check # A build could silently have LVS support disabled if the kernel includes can't @@ -187,7 +195,11 @@ %doc %{_defaultdocdir}/%{name}/ %dir %{_sysconfdir}/%{name} %{_tmpfilesdir}/%{name}.conf +%{_sysusersdir}/%{name}.conf %ghost %dir /var/lib/%{name} +%if %{with reproducible_build} +/etc/keepalived/keepalived.config-opts +%endif %config(noreplace) %ghost %attr(0640,root,root) %{_sysconfdir}/%{name}/%{name}.conf %config %attr(0640,root,root) %{_sysconfdir}/%{name}/%{name}.conf.sample %{_fillupdir}/sysconfig.%{name} ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.vTFHna/_old 2026-07-28 17:52:15.116602535 +0200 +++ /var/tmp/diff_new_pack.vTFHna/_new 2026-07-28 17:52:15.120602674 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/acassen/keepalived</param> - <param name="changesrevision">b3631012262e7156aef0a47069204b84dc7156cd</param></service></servicedata> + <param name="changesrevision">53701f5648fb457fce5c3417fd309f286fbd1335</param></service></servicedata> (No newline at EOF) ++++++ keepalived-2.3.4+git23.b3631012.tar.xz -> keepalived-2.4.3+git0.53701f56.tar.xz ++++++ ++++ 30171 lines of diff (skipped)
