[rpms/kronosnet] f43: New upstream release

[rpms/kronosnet] f43: New upstream release

[Fabio M. Di Nitto]

            A new commit has been pushed.

            Repo   : rpms/kronosnet
            Branch : f43
            Commit : 75d24d952b67546992c514dc52176c6ffa040d38
            Author : Fabio M. Di Nitto <fdinitto@redhat.com>
            Date   : 2026-07-20T16:22:17+02:00
            Stats  : +13/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/kronosnet/c/75d24d952b67546992c514dc52176c6ffa040d38?branch=f43

            Log:
            New upstream release

- CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. (Resolves rhbz#2500850)
- CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. (Resolves rhbz#2500852)
- CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. (Resolves rhbz#2500864)
- tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets
- libnozzle: Introduce test macros similar to libknet
- docs: convert README to markdown format

Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com>

---
diff --git a/.gitignore b/.gitignore
index ec9e39b..f9ca2e0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/kronosnet-1.34.tar.xz
+/kronosnet-1.35.tar.xz

diff --git a/kronosnet.spec b/kronosnet.spec
index 2168f86..1ff3bae 100644
--- a/kronosnet.spec
+++ b/kronosnet.spec
@@ -41,8 +41,8 @@
 
 Name: kronosnet
 Summary: Multipoint-to-Multipoint VPN daemon
-Version: 1.34
-Release: 2%{?dist}
+Version: 1.35
+Release: 1%{?dist}
 License: GPL-2.0-or-later AND LGPL-2.1-or-later
 URL: https://kronosnet.org
 Source0: https://kronosnet.org/releases/%{name}-%{version}.tar.xz
@@ -462,6 +462,15 @@ Requires: libknet1%{_isa} = %{version}-%{release}
 %endif
 
 %changelog
+* Mon Jul 20 2026 Fabio M. Di Nitto <fdinitto@redhat.com> - 1.35-1
+- New upstream release
+- CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. (Resolves rhbz#2500850)
+- CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. (Resolves rhbz#2500852)
+- CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. (Resolves rhbz#2500864)
+- tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets
+- libnozzle: Introduce test macros similar to libknet
+- docs: convert README to markdown format
+
 * Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.34-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
 

diff --git a/sources b/sources
index 7405bb1..1da75c0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (kronosnet-1.34.tar.xz) = f6130f8f086d3f5550fb1822e5146083def7bd15e0efd41b90f15733a483780b8448a458ab6180815da6b8e99db7df83298b0e57dd831f221d5ceae5530703f5
+SHA512 (kronosnet-1.35.tar.xz) = b6636f7f73d05a14945cf08ef1bc5795f111b906a7e6aa523c38323f4065b912f07a25173ea164f8411c4bc2c2ca0ca018cf4cde829b63dc1022de12373ef2fb

[rpms/kronosnet] f43: New upstream release

[Fabio M. Di Nitto]

            A new commit has been pushed.

            Repo   : rpms/kronosnet
            Branch : f43
            Commit : 55030e5426f2e5854d60bd9587fa122be63e2d06
            Author : Fabio M. Di Nitto <fdinitto@redhat.com>
            Date   : 2026-06-30T07:25:34+02:00
            Stats  : +11/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/kronosnet/c/55030e5426f2e5854d60bd9587fa122be63e2d06?branch=f43

            Log:
            New upstream release

Build fixes for gcc-15
Build fixes for rust coreutils
Coverity tests cleanup
Release: ship all files for completeness

Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com>

---
diff --git a/.gitignore b/.gitignore
index 75f7351..14d1ae2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/kronosnet-1.32.tar.xz
+/kronosnet-1.33.tar.xz

diff --git a/kronosnet.spec b/kronosnet.spec
index 8a4b7bf..b4c9b42 100644
--- a/kronosnet.spec
+++ b/kronosnet.spec
@@ -1,7 +1,7 @@
 ###############################################################################
 ###############################################################################
 ##
-##  Copyright (C) 2012-2025 Red Hat, Inc.  All rights reserved.
+##  Copyright (C) 2012-2026 Red Hat, Inc.  All rights reserved.
 ##
 ##  This copyrighted material is made available to anyone wishing to use,
 ##  modify, copy, or redistribute it subject to the terms and conditions
@@ -36,7 +36,7 @@
 
 Name: kronosnet
 Summary: Multipoint-to-Multipoint VPN daemon
-Version: 1.32
+Version: 1.33
 Release: 1%{?dist}
 License: GPL-2.0-or-later AND LGPL-2.1-or-later
 URL: https://kronosnet.org
@@ -436,6 +436,13 @@ Requires: libnozzle1%{_isa} = %{version}-%{release}
 %endif
 
 %changelog
+* Wed Jan 14 2026 Fabio M. Di Nitto <fdinitto@redhat.com> - 1.33-1
+- New upstream release
+- Build fixes for gcc-15
+- Build fixes for rust coreutils
+- Coverity tests cleanup
+- Release: ship all files for completeness
+
 * Thu Sep 25 2025 Fabio M. Di Nitto <fdinitto@redhat.com> - 1.32-1
 - New upstream release
 - IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x.

diff --git a/sources b/sources
index 47c0f87..fc4d5cf 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (kronosnet-1.32.tar.xz) = d516473ad493483d8500b693a7bca22017b40817acb9734e223a90fbce702aef96a0705d4b87705debf71f4b761a1a1dfa1e976756b0ab3a561677b3c6d9c1ab
+SHA512 (kronosnet-1.33.tar.xz) = d69fdd0109ee8a01cb2b9a75ae90a7e5b613eef22f24f169e5862da367396623c121b01258ab8697c164c07c75c8de2719bd84358407ebc7a60a50275aaf0ab6

[rpms/kronosnet] f43: New upstream release

[Fabio M. Di Nitto]

            A new commit has been pushed.

            Repo   : rpms/kronosnet
            Branch : f43
            Commit : 2967d10b8859c9b0e37774875f3d1220d781f01f
            Author : Fabio M. Di Nitto <fdinitto@redhat.com>
            Date   : 2026-06-30T07:25:25+02:00
            Stats  : +20/-5 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/kronosnet/c/2967d10b8859c9b0e37774875f3d1220d781f01f?branch=f43

            Log:
            New upstream release

- IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x.
- Fix potential thread race condition in libnozzle close.
- Fix wrong pointer in libknet RX thread, only triggered by old gcc (< 11).
- Libnozzle: different fixes for BSD to deal with new tap driver changes and don´t leak interfaces.
- New API call in libknet to allow configuring a dscp value for KNET_LINK_FLAG_TRAFFICHIPRIO.
- Bump soname to reflect new API call.
- Improve OpenSSL error handling.
- Add support for OpenIndiana.
- Documentation updates.
- Fix several tests to better deal with execution timing.
- Handle some new coverity errors.
- Create and refine STYLE_GUIDE.md for project contributions.

Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com>

---
diff --git a/.gitignore b/.gitignore
index 51c004a..75f7351 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/kronosnet-1.31.tar.xz
+/kronosnet-1.32.tar.xz

diff --git a/kronosnet.spec b/kronosnet.spec
index 7d29cb4..8a4b7bf 100644
--- a/kronosnet.spec
+++ b/kronosnet.spec
@@ -1,7 +1,7 @@
 ###############################################################################
 ###############################################################################
 ##
-##  Copyright (C) 2012-2022 Red Hat, Inc.  All rights reserved.
+##  Copyright (C) 2012-2025 Red Hat, Inc.  All rights reserved.
 ##
 ##  This copyrighted material is made available to anyone wishing to use,
 ##  modify, copy, or redistribute it subject to the terms and conditions
@@ -36,8 +36,8 @@
 
 Name: kronosnet
 Summary: Multipoint-to-Multipoint VPN daemon
-Version: 1.31
-Release: 2%{?dist}
+Version: 1.32
+Release: 1%{?dist}
 License: GPL-2.0-or-later AND LGPL-2.1-or-later
 URL: https://kronosnet.org
 Source0: https://kronosnet.org/releases/%{name}-%{version}.tar.xz
@@ -436,6 +436,21 @@ Requires: libnozzle1%{_isa} = %{version}-%{release}
 %endif
 
 %changelog
+* Thu Sep 25 2025 Fabio M. Di Nitto <fdinitto@redhat.com> - 1.32-1
+- New upstream release
+- IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x.
+- Fix potential thread race condition in libnozzle close.
+- Fix wrong pointer in libknet RX thread, only triggered by old gcc (< 11).
+- Libnozzle: different fixes for BSD to deal with new tap driver changes and don´t leak interfaces.
+- New API call in libknet to allow configuring a dscp value for KNET_LINK_FLAG_TRAFFICHIPRIO.
+- Bump soname to reflect new API call.
+- Improve OpenSSL error handling.
+- Add support for OpenIndiana.
+- Documentation updates.
+- Fix several tests to better deal with execution timing.
+- Handle some new coverity errors.
+- Create and refine STYLE_GUIDE.md for project contributions.
+
 * Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.31-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
 

diff --git a/sources b/sources
index e5a16ee..47c0f87 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (kronosnet-1.31.tar.xz) = 399a6948ea070ecb9dcc08109947106e0bbbd92099732037b5a12f96ac968aeda01a0247e81216c980ef57f7db15b38f82b4ce3202a937224e30d278c00f6650
+SHA512 (kronosnet-1.32.tar.xz) = d516473ad493483d8500b693a7bca22017b40817acb9734e223a90fbce702aef96a0705d4b87705debf71f4b761a1a1dfa1e976756b0ab3a561677b3c6d9c1ab