Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package lldpd for openSUSE:Factory checked in at 2026-10-26 10:03:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/lldpd (Old) and /work/SRC/openSUSE:Factory/.lldpd.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lldpd" Mon Oct 26 10:03:17 2026 rev:32 rq:1392560 version:1.0.23 Changes: -------- --- /work/SRC/openSUSE:Factory/lldpd/lldpd.changes 2026-06-16 18:31:54.671849252 +0200 +++ /work/SRC/openSUSE:Factory/.lldpd.new.2252680/lldpd.changes 2026-10-26 10:04:38.058368631 +0100 @@ -1,0 +2,23 @@ +Sun Oct 25 20:37:41 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 1.0.23: + * Add "reset" command to restore the startup configuration + without restarting lldpd. + * Escape control characters when output is a terminal. + * Fix out-of-bound reads: long interface description "was" + marker, LLDP-MED location and chassis/port-ID address + display in liblldpctl. + * Send a shutdown LLDPDU when a port stops transmitting. + * Fix Tx fast start on local change, bond double-free and + a SIGCHLD race during shutdown. +- Source0 moved to the upstream GitHub release asset: the + upstream host media.luffy.cx is DNS-dead. GPG verification + is suspended (no .asc published): dropped Source2/Source3 + and lldpd.keyring; restore once signed artifacts return. + * lldpd-1.0.22.tar.gz lldpd-1.0.22.tar.gz.asc lldpd.keyring +- This release is not affected by CVE-2023-41910 (boo#1215067), + fixed in 1.0.17; CVE-2021-43612 was credited in 1.0.13. +- Spec cleanup: drop Group tags, pwdutils pre-require is now + shadow. + +------------------------------------------------------------------- Old: ---- lldpd-1.0.22.tar.gz lldpd-1.0.22.tar.gz.asc lldpd.keyring New: ---- lldpd-1.0.23.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ lldpd.spec ++++++ --- /var/tmp/diff_new_pack.DOhkzt/_old 2026-10-26 10:04:39.850443755 +0100 +++ /var/tmp/diff_new_pack.DOhkzt/_new 2026-10-26 10:04:39.855443965 +0100 @@ -26,18 +26,20 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: lldpd -Version: 1.0.22 +Version: 1.0.23 Release: 0 Summary: Implementation of IEEE 802.1ab (LLDP) # We have some GPL linux headers in include/linux, they are used on # platforms where glibc headers are not recent enough License: GPL-2.0-or-later AND ISC -Group: System/Daemons URL: https://lldpd.github.io/ -Source0: https://media.luffy.cx/files/lldpd/%{name}-%{version}.tar.gz +# Upstream download host media.luffy.cx is DNS-dead (no answer since +# 2026-10-25); Source0 uses the upstream GitHub release asset instead. +# No .asc is published as a release asset, so signature verification +# is suspended: restore Source2/Source3 + lldpd.keyring once the +# upstream host (and signed artifacts) return. +Source0: https://github.com/lldpd/lldpd/releases/download/%{version}/%{name}-%{version}.tar.gz Source1: lldpd.sysconfig -Source2: https://media.luffy.cx/files/lldpd/%{name}-%{version}.tar.gz.gpg#/%{name}-%{version}.tar.gz.asc -Source3: http://keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0x95A42FE8353525F9#/%{name}.keyring Patch0: harden_lldpd.service.patch BuildRequires: net-snmp-devel BuildRequires: openssl-devel @@ -49,7 +51,7 @@ BuildRequires: pkgconfig(libevent) BuildRequires: pkgconfig(libxml-2.0) Requires(pre): %fillup_prereq -Requires(pre): pwdutils +Requires(pre): shadow %description This implementation provides LLDP sending and reception, supports VLAN @@ -68,7 +70,6 @@ %package -n %{libname} Summary: Implementation of IEEE 802.1ab License: MIT -Group: System/Libraries %description -n %{libname} This package provides the shared library for lldpd. @@ -82,7 +83,6 @@ %package devel Summary: Headers for the lldpd implementation License: MIT -Group: Development/Languages/C and C++ Requires: %{libname} = %{version}-%{release} %description devel @@ -142,7 +142,6 @@ %post -n %{libname} -p /sbin/ldconfig %postun -n %{libname} -p /sbin/ldconfig - %post %service_add_post lldpd.service %fillup_only ++++++ lldpd-1.0.22.tar.gz -> lldpd-1.0.23.tar.gz ++++++ ++++ 49210 lines of diff (skipped)
