File csync2.changes of Package csync2.19006

Overview Repositories Revisions Requests Users Attributes Meta

File csync2.changes of Package csync2.19006

-------------------------------------------------------------------
Wed Apr  7 16:56:59 UTC 2021 - Peter Varkoly <varkoly@suse.com>

- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch: 
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch

-------------------------------------------------------------------
Wed Nov 20 14:00:18 UTC 2019 - Peter Varkoly <varkoly@suse.com>

- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.

-------------------------------------------------------------------
Wed Aug 15 14:58:31 UTC 2018 - kgronlund@suse.com

- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
  * Add 0001-comparison-of-peer-names-provided-via-command-line-s.patch

-------------------------------------------------------------------
Thu Sep 26 09:07:40 UTC 2013 - tserong@suse.com

- Ensure COPYING file is included in package
  + Added add-COPYING.patch

-------------------------------------------------------------------
Wed Sep 11 05:12:22 UTC 2013 - tserong@suse.com

- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)

-------------------------------------------------------------------
Fri May 10 12:56:38 UTC 2013 - tserong@suse.com

- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch

-------------------------------------------------------------------
Thu Feb 28 06:00:00 UTC 2013 - coolo@suse.com

- update license to new format

-------------------------------------------------------------------
Mon Jun  4 08:56:27 UTC 2012 - tserong@suse.com

- Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE)

-------------------------------------------------------------------
Mon Mar 19 12:51:03 UTC 2012 - tserong@suse.com

- Force debug output off completely when running under xinetd (fixes
  protocol breakage when target directories don't exist; bnc#752563)

-------------------------------------------------------------------
Mon Feb 20 19:10:40 UTC 2012 - coolo@suse.com

- factory has librsync split into devel package

-------------------------------------------------------------------
Wed Oct 26 09:19:16 UTC 2011 - tserong@suse.com

- Remove explicit lib dependencies from spec file

-------------------------------------------------------------------
Tue Sep 20 12:41:40 UTC 2011 - tserong@suse.com

- Add csync2-rm-ssl-cert helper script (bnc#709811)

-------------------------------------------------------------------
Sun Sep 18 00:06:31 UTC 2011 - jengelh@medozas.de

- Remove redundant tags/sections from specfile

-------------------------------------------------------------------
Tue Jun  8 00:59:40 UTC 2010 - tserong@novell.com

- Fix build against gnutls 2.8 in factory (integrated patch from
  http://bugs.gentoo.org/show_bug.cgi?id=274213)

-------------------------------------------------------------------
Mon Dec 14 16:57:21 CET 2009 - ro@suse.de

- fix build against current openssl

-------------------------------------------------------------------
Fri Dec  4 09:58:35 UTC 2009 - jshi@novell.com

- Init import of csync2 for DRBD configuration file sync (fate#307419)

Places

File csync2.changes of Package csync2.19006

Places