Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package tailscale for openSUSE:Factory
checked in at 2024-05-11 18:21:13
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/tailscale (Old)
and /work/SRC/openSUSE:Factory/.tailscale.new.1880 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tailscale"
Sat May 11 18:21:13 2024 rev:4 rq:1173205 version:1.66.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/tailscale/tailscale.changes 2024-04-02
16:42:53.098166255 +0200
+++ /work/SRC/openSUSE:Factory/.tailscale.new.1880/tailscale.changes
2024-05-11 18:25:09.218856794 +0200
@@ -1,0 +2,37 @@
+Fri May 10 15:16:33 UTC 2024 - Richard Rahl <rra...@disroot.org>
+
+- update to 1.66.1:
+ * Resolved issues with nftables rules for stateful filtering,
+ introduced in v1.66.0.
+ * tailscale set command flags --netfilter-mode, --snat-subnet-routes,
+ and --stateful-filtering are added.
+
+- update to 1.66.0:
+ * Implemented client-side quarantining for shared-in exit nodes,
+ as a mitigation for a security vulnerability described in TS-2024-005.
+ * Use the --stateful-filtering flag for the tailscale up to enable stateful
filtering for
+ subnet routers and exit nodes, as a mitigation for a security
vulnerability described
+ in TS-2024-005.
+ * Added tab completions
+ * Use the tailscale exit-node suggest command to automatically pick an
available exit node
+ that is likely to perform best.
+ * Site-to-site networking now also requires --stateful-filtering=false in
addition to
+ --snat-subnet-routes=false on new subnet routers. Existing subnet routers
with --snat-subnet-routes=false
+ will default to --stateful-filtering=false.
+
+- update to 1.64.2:
+ * nothing relevant for linux
+
+- update to 1.64.1:
+ * nothing relevant for linux
+
+- update to 1.64.0:
+ * New: tailscale configure kubeconfig now respects KUBECONFIG environment
variable.
+ * Fixed: tailscale configure kubeconfig now works with partially empty
kubeconfig.
+ * Fixed: MSS clamping for Kubernetes operator proxies using nftables.
+ * Fixed: Containers on hosts with partial support for ip6tables no longer
crash.
+
+- turn of changelog generation
+- add completions for bash
+
+-------------------------------------------------------------------
Old:
----
tailscale-1.62.1.tar.gz
New:
----
tailscale-1.66.1.tar.gz
tailscale.obsinfo
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ tailscale.spec ++++++
--- /var/tmp/diff_new_pack.NltLOO/_old 2024-05-11 18:25:10.418900492 +0200
+++ /var/tmp/diff_new_pack.NltLOO/_new 2024-05-11 18:25:10.418900492 +0200
@@ -17,7 +17,7 @@
Name: tailscale
-Version: 1.62.1
+Version: 1.66.1
Release: 0
Summary: The easiest, most secure way to use WireGuard and 2FA
License: BSD-3-Clause
@@ -29,8 +29,11 @@
Source3: tailscaled.defaults
Patch1: build-verbose.patch
Patch2: disable-auto-update.patch
+BuildRequires: bash-completion
+BuildRequires: fish
BuildRequires: git
BuildRequires: golang-packaging
+BuildRequires: zsh
BuildRequires: golang(API) = 1.22
ExcludeArch: i586
%{?systemd_requires}
@@ -39,6 +42,30 @@
Tailscale is a modern VPN built on top of Wireguard. It works like an overlay
network between the computers of your networks using NAT traversal.
+%package bash-completion
+Summary: Tailscale bash completion
+Supplements: (%{name} and bash-completion)
+BuildArch: noarch
+
+%description bash-completion
+bash completions for %{name}
+
+%package zsh-completion
+Summary: Tailsacle zsh completion
+Supplements: (%{name} and zsh)
+BuildArch: noarch
+
+%description zsh-completion
+zsh completion for %{name}
+
+%package fish-completion
+Summary: Tailscale fish completion
+Supplements: (%{name} and fish)
+BuildArch: noarch
+
+%description fish-completion
+fish completion for %{name}
+
%prep
%autosetup -a1 -p1
@@ -51,6 +78,11 @@
./build_dist.sh ./cmd/tailscale
./build_dist.sh ./cmd/tailscaled
+#generate completions
+./%{name} completion bash > ./%{name}.bash
+./%{name} completion zsh > ./%{name}.zsh
+./%{name} completion fish > ./%{name}.fish
+
%install
mkdir -p %{buildroot}%{_sharedstatedir}/%{name}
@@ -64,6 +96,10 @@
# defaults
install -D -p -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/default/%{name}d
+install -D -p -m 0644 ./%{name}.bash
%{buildroot}%{_datadir}/bash-completion/completions/%{name}
+install -D -p -m 0644 ./%{name}.zsh
%{buildroot}%{_datadir}/zsh/site-functions/%{name}
+install -D -p -m 0644 ./%{name}.fish
%{buildroot}%{_datadir}/fish/vendor_completions.d/%{name}
+
%pre
%service_add_pre %{name}d.service
@@ -86,3 +122,12 @@
%{_unitdir}/%{name}d.service
%{_sbindir}/rc%{name}d
+%files bash-completion
+%{_datadir}/bash-completion/completions/%{name}
+
+%files zsh-completion
+%{_datadir}/zsh/site-functions/%{name}
+
+%files fish-completion
+%{_datadir}/fish/vendor_completions.d/%{name}
+
++++++ _service ++++++
--- /var/tmp/diff_new_pack.NltLOO/_old 2024-05-11 18:25:10.458901949 +0200
+++ /var/tmp/diff_new_pack.NltLOO/_new 2024-05-11 18:25:10.462902095 +0200
@@ -3,10 +3,10 @@
<param name="url">https://github.com/tailscale/tailscale.git</param>
<param name="scm">git</param>
<param name="package-meta">yes</param>
- <param name="revision">v1.62.1</param>
+ <param name="revision">v1.66.1</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="versionrewrite-pattern">v(.*)</param>
- <param name="changesgenerate">enable</param>
+ <param name="changesgenerate">disable</param>
</service>
<service name="set_version" mode="manual">
</service>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.NltLOO/_old 2024-05-11 18:25:10.490903114 +0200
+++ /var/tmp/diff_new_pack.NltLOO/_new 2024-05-11 18:25:10.494903261 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://github.com/tailscale/tailscale.git</param>
- <param
name="changesrevision">2827330c6adacd9a67940621b5f05b589527c550</param></service></servicedata>
+ <param
name="changesrevision">88e23b6cfd4b9a9cad5ce858b73ece1f07970fee</param></service></servicedata>
(No newline at EOF)
++++++ disable-auto-update.patch ++++++
--- /var/tmp/diff_new_pack.NltLOO/_old 2024-05-11 18:25:10.510903842 +0200
+++ /var/tmp/diff_new_pack.NltLOO/_new 2024-05-11 18:25:10.514903989 +0200
@@ -1,18 +1,18 @@
-diff --git a/clientupdate/clientupdate.go b/clientupdate/clientupdate.go
---- tailscale/clientupdate/clientupdate.go 2024-03-14 04:13:53.421047482
+0100
-+++ tailscale-patched/clientupdate/clientupdate.go 2024-03-14
04:28:58.518529194 +0100
-@@ -205,6 +205,10 @@
+diff -rub tailscale/clientupdate/clientupdate.go
tailscale-patched/clientupdate/clientupdate.go
+--- tailscale/clientupdate/clientupdate.go 2024-05-10 16:33:03.316978138
+0200
++++ tailscale-patched/clientupdate/clientupdate.go 2024-05-10
16:51:54.335053210 +0200
+@@ -207,6 +207,10 @@
// The distro.Debian switch case above should catch
most apt-based
// systems, but add this fallback just in case.
- return up.updateDebLike, true
+ return up.updateDebLike, canAutoUpdate
+ case haveExecutable("zypper"):
+ // Zypper must come before dfn/yum as SUSE-based
distros can have both alongside zypper.
+ // This should catch both transactional (Micro) and
non-transactional (Leap/Tumbleweed/SLES/SLED).
+ return up.updateSUSE, false
case haveExecutable("dnf"):
- return up.updateFedoraLike("dnf"), true
+ return up.updateFedoraLike("dnf"), canAutoUpdate
case haveExecutable("yum"):
-@@ -526,6 +530,12 @@
+@@ -528,6 +532,12 @@
you can use "pacman --sync --refresh --sysupgrade" or "pacman -Syu" to
upgrade the system, including Tailscale.`)
}
++++++ tailscale-1.62.1.tar.gz -> tailscale-1.66.1.tar.gz ++++++
/work/SRC/openSUSE:Factory/tailscale/tailscale-1.62.1.tar.gz
/work/SRC/openSUSE:Factory/.tailscale.new.1880/tailscale-1.66.1.tar.gz differ:
char 12, line 1
++++++ tailscale.obsinfo ++++++
name: tailscale
version: 1.66.1
mtime: 1715286091
commit: 88e23b6cfd4b9a9cad5ce858b73ece1f07970fee
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/tailscale/vendor.tar.gz
/work/SRC/openSUSE:Factory/.tailscale.new.1880/vendor.tar.gz differ: char 5,
line 1
