kronosnet-1.33-bp157.2.3.1

- add a patch to fix CVE-2026-15811:
  * 0001-CVE-2026-15811-encryption-key-exposure-in-memory-aft.patch
- add a patch to fix CVE-2026-15812:
  * 0002-CVE-2026-15812-access-control-list-bypass-via-link-I.patch
- add a patch to fix CVE-2026-15813:
  * 0003-CVE-2026-15813-memory-corruption-and-out-of-bounds-a.patch
- add patches to make the tests of previous fixes run on 1.33:
  * 0004-tests-Add-runtime-log-filter-callback-infrastructure.patch
  * 0005-tests-Add-packet-injection-helper-for-RX-validation-.patch
  * adapt-backported-tests-to-1.33.patch

- kronosnet-1.33
  * Build fixes for gcc-15 (bsc#1257258)
  * Build fixes for rust coreutils
  * Coverity tests cleanup
  * Release: ship all files for completeness

- kronosnet-1.32
  * IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x.
  * Fix potential thread race condition in libnozzle close.
  * Fix wrong pointer in libknet RX thread, only triggered by old gcc (< 11).
  * Libnozzle: different fixes for BSD to deal with new tap driver changes and don´t leak interfaces.
  * New API call in libknet to allow configuring a dscp value for KNET_LINK_FLAG_TRAFFICHIPRIO.
  * Bump soname to reflect new API call.
  * Improve OpenSSL error handling.
  * Add support for OpenIndiana.
  * Documentation updates.
  * Fix several tests to better deal with execution timing.
  * Handle some new coverity errors.
  * Create and refine STYLE_GUIDE.md for project contributions.
- kronosnet-1.31
  * Fixed incorrect lzo1x_decompress call to use the safe version
  * Udp: lower log levels for messages triggered by every single packets to trace level.

- kronosnet-1.30
  * Convert time_t to unsigned long long before formatting
  * Add warning when packets are being received from the wrong interface

- kronosnet-1.29
  * Fix FORTIFY source detection
  * libknet/tests: fix potential overflow with sprintf
  * [man] update to latest doxyxml from libqb

- kronosnet-1.28
    changes since 1.15
  * [links] fix conversion
  * [rx] allow links to be active faster
  * [links] fix ping interval and pong timeout value checking
  * [nozzle] don´t leak tun/tap interfaces in test suite
  * [crypto] Try crypt and decrypt on crypto_init
  * [spec] Migrate to SPDX license
  * [nozzle] tests: Fix 'set_down' test on FreeBSD-devel
  * [tx] Remove expensive memsets
  * [log] Add a TRACE log level
  * [man] update to latest doxyxml from libqb
  * [udp] Move EPERM to be alongside EMSGSIZE in tx error handler
  * [pmtud] Reset/restart pmtud when a node joins
  * [doc] To Do list moved to projects.clusterlabs.org (#379)
  * [logging] Fix Initializing typo
  * [tx] fix epoll event size to cope with extra event on send to link
  * [tests] deal with new annocheck symlink checks
  * [tests] update memcheck exceptions
  * [UDP] Check for EHOSTUNREACH
  * [build] fix flag detections for gcc
  * [doc] update links to mailing lists and drop obsolete test suite
  * [logging] slow down knet a bit when log socket is busy
  * [crypto] improve logging when failing to decrypt packets
  * [udp] use ICMP error messages to trigger faster link down detection
  * [host] fix dst_seq_num initialization race condition
  * [crypto] fix nss crypto buffer boundaries usage
  * [build] fix debug build vs annocheck parameters
  * [tests] temporary disable annobin lto check for centos8 failure
  * [build] Add annobin build/check support
  * [nozzle] fix tests on machines that don´t have bash
  * [tests] make execution of functional testing optionals
  * send: Fix send_sync()
  * [transports] remove unused internal ACL API
  * [acl] major internal rework
  * [acl] make knet_link_add_acl a wrapper to knet_link_insert_acl
  * [host] use correct seq_num to reclaim buffers
  * [rx] increase defrag buffers to better deal with network jitter
  * [man] update doxygen2man to latest from libqb
  * [doc] Add comments to structure members
  * [link] don´t allow mix of dynamic and static links
  * [link] use previously cached value as link info might not be accurate
  * [link] don´t leak resources if link configuration fails
  * [tests] suppress more libnss3 errors
  * [spec] cleanup some krosnonetd leftovers
  * [tx] minor optimizations to avoid recalculating socksize over and over
  * [docs] IRC channel is now on Libera Chat
  * [coverity] fix 2 buffer initialization (potential) issues
  * [nozzle] fix nozzle_up() on FreeBSD
  * [lib] Don't use -rpath
  * [nozzle] Remove inet_ntoa() call
  * [handle] validate handle in public API
  * [global] Update copyright
  * [docs] Update README for BSD section
  * [openssl] port knet top openssl3.0-alpha13
  * [tests] hide another internal libnss non recurring memory leak
  * [tests] add more exceptions to deal with Ubuntu latest rebuilds (clang counterpart)
  * [tests] add more exceptions to deal with Ubuntu latest rebuilds
  * [cleanup] remove unused infrastructure to send HOSTINFO messages
  * [sctp] check and warn about internal fd tracker
  * [tests] hide internal nss memory leak (non-recurring)
  * [rx] fix data stats on RX to match TX model
  * [rx] fix per link stats for data packets
  * [threads] make sure to initialize events
  * [cleanup] drop no longer used poc-code
  * [cleanup] kill all unsupported kronosnetd code
  * [cleanup] Move public APIs calls to more suitable location
  * [crypto] add support for openssl 3.0
  * [man] fix type comparison
  * [tests] more ignore list of nss internal stuff
  * [tests] ignore openssl errors triggered when building with clang
  * [tests] fix variable increment logic (detected by clang)
  * [crypto] add support for live reconfiguration
  * [build] update valgrind memcheck exception file
  * [tests] sets defaults for coverity scan check to match CI
  * [tests] add basic framework to create, join and stop many nodes
  * [tests] use link_get_enable instead of get_status
  * [tests] remove unnecessary shutdown locking
  * [build] Use git-version-gen during specfile build
  * [build] Fix fallback handling in git-version-gen
  * [man] sync doxygen2man from libqb master
  * [openssl] allow use of deprecated HMAC interface with openssl 3.0
  * [tests] strip extra symbol information generated by new nm
  * [transport] notify transports that a link is down
  * [sctp] fix ifup/ifdown handling for connected sockets
  * [netutils] move sockaddr_len definition where it belongs
  * [links] fix spacing
  * [sctp] make sure outgoing connections are bound to a specific IP address
  * [man] use libqb version of doxygen2man when available
  * [build] make sure to use correct libqb include files across
  * [lists] add missing build CFLAGS for test suite
  * [lists] drop internal implementation and use libqb one
  * [lists] fix build with recent gcc changes
  * [tests] fix return code from wait_for_packet
    Added: kronosnet-1.28.tar.xz
    Removed : kronosnet-1.28.tar.gz

- kronosnet-1.15
    changes since 1.14
  * [stats] allow knet_link_get_status to operate in readlock context
  * [stats] allow knet_handle_get_stats to operate in a readlock context
  * [rx] kill unused variable
  * [transports] use SO_REUSEADDR only for sctp
  * [man] Enhance prio description of POLICY_PASSIVE
  * man: Change strcat to strncat
  * man: Fix covscan reports in doxyxml.c
    changes since 1.13
  * [global] Update copyright across the board
  * [sctp] major surgery to use only SCTP events to determine socket status
  * [rx] use defines to determine RX data types vs random numbers
  * [tx] Don't Clear out msghdr for all transports.
  * [rx] Don't return 512 EOF messages from _recvmmsg
  * [rx] send reply packets only when transport is connected
  * [rx] unify latency values to a capped value to link precision
  * [latency] fix incorrect math that could lead to bad latency calculation
  * [udp] Better fix for -ENETUNREACH
  * [udp] simplify code (same logic)
  * [udp] don't make socket spin if a network I/F is down
  * [nozzle] use interface name size consistently and drop strncpy in favour of memmove
  * [host] use KNET_MAX_HOST_LEN consistently
  * [handle] fix typo in error log message
  * [handle] make sure to unlock config handle on failure
  * [RX] silence defrag buffer expiration debug error
  * [TX] discard too big packets when reading from socketpairs
  * [RX] handle short write to the application properly
  * [RX] Discard incoming packets if knet cannot reply back.
  * [build] fix openssl version detection when not using pkg-config
    changes since 1.12
  * [PMTUd] invalidate MTU for a link if the value is lower than minimum
  * [rx] copy data into the defrag buffer only if we know the size of the frame
  * [host] fix defrag buffers reclaim logic
  * [host] rename variables to make it easier to read the code

- Update to version 1.21
  * [rx] fix per link stats for data packets
  * [rx] fix data stats on RX to match TX model
  * [crypto] add support for openssl 3.0
  * [sctp] fix ifup/ifdown handling for connected sockets
  * [sctp] make sure outgoing connections are bound to a specific
    IP address
  * [PMTUd] invalidate MTU for a link if the value is lower than
    minimum
  * A lot of other bugfixes and documentation improvements

- kronosnet-1.12
    changes since 1.11
  * Default compression level use
  * Fix a lot of converity errors
  * Fix lock, buffer overrun and memory release bugs
  * Retry locking in case of failure in SCTP
  * Stabilize latency calculation when nodes are not responsive
    changes since 1.10
  * Log information about detected kernel MTU
  * Fix MTU calculation when using crypto and add docs
  * Rework the whole math to calculate MTU
  * Add dynamic pong timeout when using crypto
  * Add ability to manually override MTU and disable PMTUd
    changes since 1.9
  * automatically add and remove point to point access lists
  * allow knet_bench to enable/disable access lists
  * enable access lists for GENERIC_ACL protocols (udp for example)
  * add access lists support to sctp
  * Do some function rename and code cleanup
  * Add documentation for enable_access_list
  * add external API calls to manage access lists
  * add support for libzstd
  * fix openssl1.0 initialization code
    changes since 1.8
  * remove libnss 3des support
  * improve error message decoding from ICMP errors
    changes since 1.7
  * fix libnozzle man page generation target
  * don´t specify destination address for connection oriented protocols
  * increase log level for currently used links

- kronosnet-1.7
    changes since 1.6
  * Fix minor issues with libnozzle man pages
  * SCTP: support more kernel versions
  * Better debugging information of internal threads status
  * Fix build with gcc9
  * [developers] expose API version in libknet.h and enable
    all compiler warnings at build time
    changes since 1.5
  * [IMPORTANT] Fix a PMTUd packet size issue when using
    crypto communications
  * Fix build with older versions of openssl
  * Fix a CPU spinning issue when iptables are set incorrectly
  * Fix a SCTP kernel <-> userland compatibility issue
  * Minor other fixes across the code and build infrastructure
  * libnozzle hits the first GA release.

- kronosnet-1.5
    changes since 1.4
  * [IMPORTANT] fix internal loopback link handling
  * Improved internal threads information for debugging purposes
    changes since 1.3
  * Reduced amount of locking around non-performance critical areas
  * Optimized threads startup and shutdown timer
- Removed: add-version.patch

- kronosnet-1.3 is available now(bsc#1090641)
    changes since 1.2
  * Fix potential crashes in the crypto code
    changes since 1.1
  * Fix a potential crash when using external destination handlers
  * Improve compression level validation by delegating the validation to
    the external compression library
  * Improve the build system to accommodate repeatable builds

- kronosnet-1.0 is available now(bsc#1077702)
    kronosnet-1.1 released, so upgrade to 1.1
  * Fix plugins loader by switching from RPATH to RUNPATH
  * Man pages are now automatically generated at build time
  * Better error reporting from crypto plugins
  * Fix and improve the whole build system
  * Add support for some older lz4 versions
  * Fix issue with UDP sockets that could cause knet to spin
  * Add new API call to run knet unprivileged
    Added: kronosnet-1.1.tar.gz
    add-version.patch
    Removed: kronosnet-1.0.tar.gz

- Fix almost-empty SRPM description.
- Fix faulty leading whitespace in descriptions.
- Reduce size of %if..%endif blocks to minimum.
- Remove pkgconfig requires that are already automatically detected.

- kronosnet-1.0 is available now(bsc#1077702)
    Added: kronosnet-1.0.tar.gz
    kronosnet.spec
    kronosnet.changes