Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package fail2ban for openSUSE:Factory checked in at 2026-08-18 16:38:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/fail2ban (Old) and /work/SRC/openSUSE:Factory/.fail2ban.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fail2ban" Tue Aug 18 16:38:23 2026 rev:77 rq:1371755 version:1.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/fail2ban/fail2ban.changes 2026-06-22 17:26:50.048300596 +0200 +++ /work/SRC/openSUSE:Factory/.fail2ban.new.1258/fail2ban.changes 2026-08-18 16:39:02.416421211 +0200 @@ -1,0 +2,42 @@ +Tue Aug 18 08:55:05 UTC 2026 - ecsos <[email protected]> + +- Update to 1.1.1 + * For details, see + <https://github.com/fail2ban/fail2ban/blob/1.1.1/ChangeLog>. + * The iptables filter was rewritten for supporting multiple + chains. User-level derivations may become incompatible. Tags + like e.g. `<chain>` and `<_ipt_for_proto-iter>` may need to be + replaced. + * Several rules in the Exim filter w.r.t. mode "normal" moved to + a new mode "more", because of too risky handling. To use the + config as before, set `mode = more` for the exim jail. + * Fixed catastrophic backtracking explosion for REs in + domino-smtp and dovecot filters. + * Fixed systemd causing "too many open files" error for a lot of + journal files and large amount of systemd jails. + * Passing of arguments from jails to action or filter will affect + conditional section too, e.g. setting blocktype="DROP" via jail + for action would now apply for IPv4 and IPv6 chains. + * jail.conf: + * Default `banactions` need to be specified in paths-*.conf + (maintainer level) now. + * Since the stock fail2ban includes paths-debian.conf by default, + banactions are nftables (can be overwritten in jail.local by + user). + * action.d/firewallcmd-ipset.conf: Renamed `ipsettype` to + `ipsetbackend`. The parameter ipsettype will be used now to the + real set type. + * The Apache filter now recognizes AH02811 and AH10244 log messages. + * The sshd filter was adapted to support OpenSSH 9.8's new + "sshd-session" process and log messages. + * sshd filter: DDoS and aggressive modes had their regex extended + for timeout before authentication. + * New Features and Enhancements + * The systemd backend was extended with a new parameter called "rotated" + that allows monitoring only actual journals and ignore a lot of rotated files by + default. + * The new jail option `skip_if_nologs` was added to ignore a jail + if no logpath matches were found. +- Drop fail2ban-fix-openssh98.patch, bacause now in upstream. + +------------------------------------------------------------------- Old: ---- fail2ban-1.1.0.tar.gz fail2ban-1.1.0.tar.gz.asc fail2ban-fix-openssh98.patch New: ---- 1.1.1.tar.gz.asc fail2ban-1.1.1.tar.gz ----------(Old B)---------- Old: if no logpath matches were found. - Drop fail2ban-fix-openssh98.patch, bacause now in upstream. ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fail2ban.spec ++++++ --- /var/tmp/diff_new_pack.q10v5F/_old 2026-08-18 16:39:03.549461757 +0200 +++ /var/tmp/diff_new_pack.q10v5F/_new 2026-08-18 16:39:03.550461793 +0200 @@ -24,14 +24,15 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: fail2ban -Version: 1.1.0 +Version: 1.1.1 Release: 0 Summary: Bans IP addresses that make too many authentication failures License: GPL-2.0-or-later Group: Productivity/Networking/Security URL: https://www.fail2ban.org/ Source0: https://github.com/fail2ban/fail2ban/archive/%{version}.tar.gz#/%{name}-%{version}.tar.gz -Source1: https://github.com/fail2ban/fail2ban/releases/download/%{version}/%{name}-%{version}.tar.gz.asc +#Source1: https://github.com/fail2ban/fail2ban/releases/download/%%{version}/%%{name}-%%{version}.tar.gz.asc +Source1: https://github.com/fail2ban/fail2ban/releases/download/%{version}/%{version}.tar.gz.asc Source2: %{name}.sysconfig Source3: %{name}.logrotate Source5: %{name}.tmpfiles @@ -46,10 +47,9 @@ Patch300: %{name}_service.patch # PATCH-FEATURE-OPENSUSE harden_fail2ban.service.patch [email protected] -- Added hardening to systemd service(s) bsc#1181400 Patch301: harden_fail2ban.service.patch -# PATCH-FIX-OPENSUSE fail2ban-fix-openssh98.patch [email protected] -- support openssh9.8 bsc#1230101 -Patch302: fail2ban-fix-openssh98.patch # PATCH-FIX-OPENSUSE setup-py-install-dir.patch [email protected] -- fix unit file population broken by switch to pyproject_wheel macro Patch303: setup-py-install-dir.patch +BuildRequires: %{python_module base >= 3.5} BuildRequires: %{python_module pip} BuildRequires: %{python_module pyinotify >= 0.8.3} BuildRequires: %{python_module setuptools} @@ -237,6 +237,11 @@ %exclude %{_bindir}/%{name}-testcases %exclude %{python3_sitelib}/%{name}/tests +%pycache_only %exclude %{python_sitelib}/%{name}/__pycache__/*.pyc +%pycache_only %exclude %{python_sitelib}/%{name}/client/__pycache__/*.pyc +%pycache_only %exclude %{python_sitelib}/%{name}/compat/__pycache__/*.pyc +%pycache_only %exclude %{python_sitelib}/%{name}/server/__pycache__/*.pyc + %files -n monitoring-plugins-%{name} %license COPYING %doc files/nagios/README ++++++ fail2ban-1.1.0.tar.gz -> fail2ban-1.1.1.tar.gz ++++++ ++++ 6239 lines of diff (skipped) ++++++ fail2ban-opensuse-locations.patch ++++++ --- /var/tmp/diff_new_pack.q10v5F/_old 2026-08-18 16:39:03.871473281 +0200 +++ /var/tmp/diff_new_pack.q10v5F/_new 2026-08-18 16:39:03.874473388 +0200 @@ -1,8 +1,8 @@ -Index: fail2ban-1.1.0/config/jail.conf +Index: fail2ban-1.1.1/config/jail.conf =================================================================== ---- fail2ban-1.1.0.orig/config/jail.conf -+++ fail2ban-1.1.0/config/jail.conf -@@ -735,7 +735,7 @@ backend = %(syslog_backend)s +--- fail2ban-1.1.1.orig/config/jail.conf ++++ fail2ban-1.1.1/config/jail.conf +@@ -731,7 +731,7 @@ backend = %(syslog_backend)s # filter = named-refused # port = domain,953 # protocol = udp @@ -11,7 +11,7 @@ # IMPORTANT: see filter.d/named-refused for instructions to enable logging # This jail blocks TCP traffic for DNS requests. -@@ -743,7 +743,7 @@ backend = %(syslog_backend)s +@@ -739,7 +739,7 @@ backend = %(syslog_backend)s [named-refused] port = domain,953 @@ -20,12 +20,12 @@ [nsd] -Index: fail2ban-1.1.0/config/paths-common.conf +Index: fail2ban-1.1.1/config/paths-common.conf =================================================================== ---- fail2ban-1.1.0.orig/config/paths-common.conf -+++ fail2ban-1.1.0/config/paths-common.conf -@@ -90,4 +90,4 @@ solidpop3d_log = %(syslog_local0)s - mysql_log = %(syslog_daemon)s +--- fail2ban-1.1.1.orig/config/paths-common.conf ++++ fail2ban-1.1.1/config/paths-common.conf +@@ -95,4 +95,4 @@ mysql_log = /var/log/mariadb/mariadb.log + mysql_backend = %(default_backend)s -roundcube_errors_log = /var/log/roundcube/errors ++++++ fail2ban_service.patch ++++++ --- /var/tmp/diff_new_pack.q10v5F/_old 2026-08-18 16:39:03.954476251 +0200 +++ /var/tmp/diff_new_pack.q10v5F/_new 2026-08-18 16:39:03.959476430 +0200 @@ -1,14 +1,15 @@ -Index: fail2ban-1.1.0/files/fail2ban.service.in +Index: fail2ban-1.1.1/files/fail2ban.service.in =================================================================== ---- fail2ban-1.1.0.orig/files/fail2ban.service.in -+++ fail2ban-1.1.0/files/fail2ban.service.in -@@ -6,9 +6,10 @@ PartOf=iptables.service firewalld.servic +--- fail2ban-1.1.1.orig/files/fail2ban.service.in ++++ fail2ban-1.1.1/files/fail2ban.service.in +@@ -6,10 +6,11 @@ PartOf=iptables.service firewalld.servic [Service] Type=simple +EnvironmentFile=-/etc/sysconfig/fail2ban Environment="PYTHONNOUSERSITE=1" - ExecStartPre=/bin/mkdir -p /run/fail2ban + RuntimeDirectory=fail2ban + StateDirectory=fail2ban -ExecStart=@BINDIR@/fail2ban-server -xf start +ExecStart=@BINDIR@/fail2ban-server -xf $FAIL2BAN_OPTIONS start # if should be logged in systemd journal, use following line or set logtarget to sysout in fail2ban.local
