Changelog for
keepalived-2.3.1+git86.59c39afe-102.1.i586.rpm :
* Mon Oct 14 2024 varkolyAATTsuse.com- Update to version 2.3.1+git86.59c39afe:
* vrrp: allow specifing interval amd timeout to milli-second resolution
* vrrp: on reload only configured track_script name was checked
* lib: fix corruption of master-child_pid red black tree
* lib: add micro-second timers to memory allocation debugging
* core: update addattr_l to match current iproute2 code - almost
* lib: add file missing from previous commit
* all: suppress an increases alignment warning
* core: use /
* FALLTHROUGH
*/ rather than __fallthrough;
* ipvs: resolve a \"cast increases required alignment\" warning
* build: don\'t redefine FORTIFY_SOURCE if host environment defines it
* vrrp ipvs: remove unused definition of XENFS_SUPER_MAGIC
* vrrp ipvs: fix warnings related to signedness of statfs() f_flags
* all: use correct format specifier for time fields
* bfd: make alloc_bfd() return NULL rather than false on error
* all: make min_auto_priority delay variable an unsigned
* configure: explicitly set language to C for configure
* itest: Warn if close after send not set in tcp_server for http
* test: Make tcp_server use of SO_LINGER optional
* core: remove diagnostic message accidently added in commit 7cb09b2
* vrrp ipvs: Stop setting SO_LINGER on TCP sockets
* test: update tcp_server and tcp_client
* bfd: use time_t to avoid implicit ptr type casting
* VRRP: add thread_timer_expired keyword as a synonym of timer_expired_backup
* Wed Sep 11 2024 Marcus Rueckert
- Update service file to use manual mode as disabled is deprecated- switch to TAG_OFFSET for a more readable version
* Wed Sep 11 2024 mrueckertAATTsuse.de- Update to version 2.3.1+git59.b6681f98:
* all: update how pidfile handled after reload with new configuration
* Revert \"all: ensure pidfile is created if a reload causes child to start\"
* Revert \"all: update how pidfile handled after reload with new configuration\"
* all: update how pidfile handled after reload with new configuration
* all: ensure pidfile is created if a reload causes child to start
* Wed Aug 14 2024 varkolyAATTsuse.com- Update to version 2.3.1+git.1723301895.df93f341:
* all: Ensure pid file exists when respawning child process
* vrrp: check ifindex != 0 before using the interface
* vrrp: Duplicate/drop MLDv1 listener reports on VMACs
* core: ensure only one instance of keepalived can run per config_id
* configure: add --enable-(cflags,cppflags,ldflags) options
* configure: add --enable-sanitize-(undefined,leak,memory,scudo,hwaddress) options
* vrrp: change vrrp_in_chk_vips to return bool rather than int
* core: cosmetic code layout change
* core: remove some duplicate include files
* vrrp: stop memory leak when error in configuring vrrp_iptables (bsc#1228123) VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler
* Fri Jul 19 2024 Marcus Rueckert - Update to 2.3.1 https://www.keepalived.org/release-notes/Release-2.3.0.html https://www.keepalived.org/release-notes/Release-2.3.1.html
* Thu Feb 22 2024 Dominique Leuenberger - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN
* Mon Feb 05 2024 Marcus Meissner - provide user(keepalived) and group(keepalived)
* Wed May 31 2023 Marcus Rueckert - Update to 2.2.8 https://www.keepalived.org/release-notes/Release-2.2.8.html
* Tue Apr 12 2022 Marcus Rueckert - Own /etc/keepalived/keepalived.conf as %ghost entry otherwise upgrading the package will always move the /etc/keepalived/keepalived.conf to /etc/keepalived/keepalived.conf.rpmsave- make permissions of config files more secure
* Thu Feb 24 2022 Ferdinand Thiessen - Update to 2.2.7
* Fix CVE-2021-44225: The D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property.
* New features:
* global: Don’t assume running as user root.
* ipvs: Add support to twos scheduler.
* vrrp: New features:
* Add vrf option for unicast without specifying an interface.
* Add option unicast_fault_no_peer.
* Allow specification of multicast address to be used.
* Add vrf option to static and vrrp routes.
* Add option to resend vrrp states on fifos after reload.
* Allow duplication of VRIDs on an interface with unicast peers.
* systemd: Add keepalived-non-root.service systemd service file.
* make BFD work when IPv6 disabled on system.
* Fix calculating CLOCK_REALTIME and CLOCK_MONOTONIC offsets.
* bfd: Handle interface down/address missing when keepalived starts. This resolves a segfault, and also makes bfd retry once per minute to create send socket if it cannot do so due to no address to bind to on an interface.
* vrrp:
* Fix configured IPv6 multicast addresses with VMACs.
* Don’t segfault if duplicate VMAC name, but ignore second name.
* Don’t delete and recreate VMAC on reload if only VRID has changed.
* Don’t segfault if don’t have permission for ARP/NDISC socket.
* Fix IPv6 with vmac_xmit_base.
* Fix disabling vmac-xmit-base with VRRPv3 IPv6 use_vmac.
* Fix specifying user/group for vrrp_scripts.
* Various other fixes and improvements
* Thu Dec 09 2021 Ferdinand Thiessen - Update to 2.2.4
* Bug fixes- Update to 2.2.3
* Added some new features and minor bug fixes
* genhash utility is now part of the mainline daemon
* https://www.keepalived.org/release-notes/Release-2.2.3.html- Drop 1915.patch, merged upstream- Drop outdated suse_version check
* Mon Sep 27 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_keepalived.service.patch
* Wed Jul 21 2021 Dirk Müller - add 1915.patch to fix build on tumbleweed
* Mon Mar 08 2021 Marcus Rueckert - drop linux-4.15.patch: No longer needed as it was a backport from upstream- Cleanup configure options after consultation with upstream: - --enable-regex-timers is for debugging purposes - --enable-snmp-checker and --enable-snmp-vrrp are enabled by - -enable-snmp - --enable-snmp-rfcv2 and --enable-snmp-rfcv3 anre enabled by - -enable-snmp-rfc - --enable-stacktrace is definitely a debugging option- on systems where we have nftables support we will only ship with nftables support (>= 15.0) and use iptables support only on older distributions.
* Sun Mar 07 2021 Marcus Rueckert - Update to 2.2.2 https://www.keepalived.org/release-notes/Release-2.2.2.html- change how we install documentation to avoid duplicated files- Link all the files for ipset, iptables, libnl instead of dlopen. Drop the previous workaround for generating requires for the dlopen-ed libaries.- remove unsupported configure option: --enable-libiptc
* Thu Feb 18 2021 Marcus Rueckert - Make sure we pull in the libraries we need for dlopen, by following the symlinks from the .so symlinks with the requires_file macro.
* Tue Jan 26 2021 Marcus Rueckert - Update to 2.2.1 https://www.keepalived.org/release-notes/Release-2.2.1.html https://www.keepalived.org/release-notes/Release-2.2.0.html https://www.keepalived.org/release-notes/Release-2.1.5.html https://www.keepalived.org/release-notes/Release-2.1.4.html https://www.keepalived.org/release-notes/Release-2.1.3.html https://www.keepalived.org/release-notes/Release-2.1.2.html https://www.keepalived.org/release-notes/Release-2.1.1.html https://www.keepalived.org/release-notes/Release-2.1.0.html- enable systemd integration via libsystemd (new BR: libsystemd)- switch to systemd_ordering instead of systemd_requires- sync configure options with the configure script
