File quagga.changes of Package quagga.openSUSE_Leap_42.1_Update

Overview Repositories Revisions Requests Users Attributes Meta

File quagga.changes of Package quagga.openSUSE_Leap_42.1_Update (Revision 666ce647968168bd05a712b11f07062b)

Currently displaying revision 666ce647968168bd05a712b11f07062b , Show latest

-------------------------------------------------------------------
Wed Apr 26 14:53:20 UTC 2017 - mt@suse.de

- Use content of %tmpfiles_create macro o create quagga rundir and
  adjust tmpfiles config to contain proper rundir at install time.

-------------------------------------------------------------------
Tue Apr 11 11:55:39 UTC 2017 - mt@suse.de

- Disabled passwords in default zebra.conf config file, causing
  to disable vty telnet interface by default. The vty interface
  is available via "vtysh" utility using pam authentication to
  permit management access for root without password (bsc#1021669).
- Changed owner of /etc/quagga to quagga:quagga to permit to manage
  quagga via vty interface.

-------------------------------------------------------------------
Tue Apr  4 11:52:01 UTC 2017 - mt@suse.de

- Added quagga.log and create and su statemets to logrotate config,
  changed default zebra log file name from quagga.log to zebra.log.
- Install missed /etc/sysconfig/quagga fillup template

-------------------------------------------------------------------
Fri Mar 30 11:20:52 UTC 2017 - mt@suse.de

- Apply quagga-CVE-2017-5495-limit-vty-buffer-to-4096-bytes.patch:
  Fix for telnet 'vty' interface DoS due to unbounded memory
  allocation (CVE-2017-5495,bsc#1021669)

-------------------------------------------------------------------
Tue Oct 18 10:27:03 UTC 2016 - mt@suse.de

- Add quagga-CVE-2016-1245-stack-overrun-in-IPv6-RA-receive.patch:
  Fix for a zebra stack overrun in IPv6 RA receive code.
  (CVE-2016-1245, bsc#1005258)

-------------------------------------------------------------------
Wed May  4 12:02:03 UTC 2016 - pwieczorkiewicz@suse.com

- Add quagga-CVE-2016-4049-fix-buf-ovflow-bgp-dump-routes.patch:
  Fix for a buffer overflow error in bgp_dump_routes_func.
  (CVE-2016-4049, bsc#977012)

-------------------------------------------------------------------
Thu Mar 31 14:07:01 UTC 2016 - pwieczorkiewicz@suse.com

- Disallow unprivileged users to enter config directory /etc/quagga
  (group: quagga, mode: 750) and read configuration files installed
  there (group: quagga, mode: 640). (boo#770619)

-------------------------------------------------------------------
Wed Mar 16 10:10:20 UTC 2016 - pwieczorkiewicz@suse.com

- Add quagga-CVE-2016-2342-VPNv4-NLRI-memcpy-stack-overflow.patch:
  Extend the prefixlen check to ensure it is within the bound of
  the NLRI packet data AND the on-stack prefix structure AND the
  maximum size for the address family. (CVE-2016-2342, bsc#970952).

-------------------------------------------------------------------
Sat Mar 21 12:11:13 UTC 2015 - p.drouand@gmail.com

- Fix build for openSUSE 13.1/SLE12

-------------------------------------------------------------------
Sat Mar 14 01:07:11 UTC 2015 - p.drouand@gmail.com

- Update to version 0.99.24.1
  * zebra: don't print uninitialized string (3b02fe8)
    This crept in as part of the MRIB improvements and I missed the compiler
    warning between other noise.  Unfortunately, printing an uninitialised
    variable can in fact make zebra crash, so this is not trivial.
- Use systemd for openSUSE > 12.3
- Add patch from Fedora
  * 0001-systemd-change-the-WantedBy-target.patch

-------------------------------------------------------------------
Wed Jul 30 15:45:24 UTC 2014 - sfalken@opensuse.org

- Update to 0.99.23
  See http://savannah.spinellicreations.com//quagga/quagga-0.99.23.changelog.txt
  minor fixes:
    bgpd: Fix condition allowas-in in rsclient code
          support TTL-security with iBGP, factor out TTL setting
          factor out eBGP multihop check
          fix fast external fallover behavior
          increase TCP socket buffer size
          fix O_NONBLOCK on outgoing  
          send notify in OpenSent when stopping manually
          display multipath status in "show ip bgp"
          track correct originator-id in reflected routes
          add 'bgp bestpath as-path multipath-relax'  
          fix crash when allowas-in is done on inactive peer
	  efficient NLRI packing for AFs != ipv4-unicast
	  don't compare next-hop to router-id
	  use ATTR_FLAG_BIT() for BGP_ATTR_ values
	  fix some DEFUN definitions
	  bgpd-set-v4-nexthop-for-v6-peering.patch
	  support NEXTHOP_IPV4_IFINDEX in bgp import check
	  honor PEER_FLAG_DISABLE_CONNECTED_CHECK on bgp_scan
	  write NOTIFY non-blockingly
	  prevent double address delete on shutdown
	  stricter packet handling in OpenSent
	  fix lost passwords of grouped neighbors
    *: nuke ^L (page feed)
    isisd: ignore the unrecognized TLVs
    ripd: fix "show ip rip status" documentation
	  avoid the zero interface metric
	  correctly redistribute ifindex routes (BZ#664)
    zebra: raise the privileges before calling socket()
           Change the mechanism for comparing route ID's.
           fix some DEFUN definitions
           apply syntactic sugar to rib_dump()
           set metric for directly connected routes via netlink to 0
           log routes w/o gateway in rib_delete_ipv4
           match gateway when deleting NEXTHOP_IPV4_IFINDEX routes
           make rib_dump() compatible with IPv6 RIB
           apply route-maps for interface routes
           fix recursive-routes via ifindex routes
           implement NEXTHOP_FLAG_ONLINK
           handle blackholes encountered in recursive resolution
           rework recursive route resolution
           improve interface shutdown behaviour
           don't change connected state from zebra/interface.c
           add ZEBRA_IFC_QUEUED to keep track of kernel state
	   warn if advertising connected with _REAL unset
	   consolidate connected_implicit_withdraw
	   clear ZEBRA_IFC_CONFIGURED on "no ipv6 addr"
	   make if_subnet_delete a bit more strict
	   process information about new addresses (BZ#486)`
	   support NEXTHOP_IPV4_IFINDEX in bgp import check
	   improve display of NEXTHOP_IPV4_IFINDEX in show ip route
	   don't printf to stdout on ZEBRA_IPV6_NEXTHOP_LOOKU
	   use SO_RCVBUFFORCE for netlink socket
    ospfd: add debug messages for router lsa-generation
	   For an ABR, ensure the right LSID is MaxAge'd
	   clarify indentation and comments in ospf_lsa_maxage_delete
	   fix a reference counting issue introduced by commit 4de8bf0011
	   check the LS-Ack's recentness instead of only comparing the #seq
	   don't allow to set network type on loopback interfaces
	   run DR election prior to LSA regeneration
	   ospfd/ospf_vty.c: use keyword cmd style
	   fix some DEFUN definitions
	   fixup log message in ospf_zebra_delete
	   refactor some common defines
	   protect vs. VU#229804 (malformed Router-LSA)
	   CVE-2013-2236, stack overrun in apiserver
	   fix flooding procedure
	   make ospf_maxage_lsa_remover actually yield
	   restore nexthop IP for p2p interfaces
	   fix LSA initialization for build without opaque LSA
    lib: use heap to manage timers
         remove unused thread_master_debug function
         lib/command.c: rewrite command matching/parsing
         fix possible off-by-one in stream_put_prefix()
         fix for dynamically grown hashes
         fix backtraces broken by 837d16c...
         unconditionally include stddef.h
         register vtysh socket in server socket vector (BZ#754)
    ospf6d: fix refcounting in ospf6_asbr_lsa_remove
            add "auto-cost reference-bandwidth" command
            compute interface cost from its bandwidth
            solve segfaults with ospf6d on FreeBSD
            Merge volatile/cumulus_ospf6d
            fix interface_down() stopping hellos
            clear lsa->refresh before clearing LSAs
            handle missing link local address more gracefully
            improve ordered shutdown
            clear DR info on interface_down
            set cmsg size correctly
            don't run DR election early on "ipv6 ospf6 priority"
            fix integrated config
            add SPF logs, statistics, and display of SPF parameters
            add 'log-adjacency-changes [detail]'
            don't send LSAck on an interface if we've flooded the LSU out that i/f
            handle Prefix and Router Options bits correctly
            add LSA payload to show summary output
            increment dbdesc seqnum on SeqNumberMismatch/BadLsReq event
            don't change SeqNum on initial DbDesc message
            handle seqnum wrapping
            add overload support
            fix linkdown handling
            correct nexthop through directly connected networks
            don't suppress empty router LSA
            turn off expensive debugging
            convert LSDB to use route_node, improve performance
            fix neighbor state machine (faster lsdb sync, RFC compliance)
            add p2p interface support
            fix various bugs in installing and flooding LSAs
            add more details to show ipv6 ospf6 data
            enable the commands to support detailed debugging of LSAs.
            remove older version of LSA from neigbor retx list before prematurely aging it.
            schedule SPF to run on events rather than directly on each event.
            refactor some common defines    
    security: Fix some typos and potential NULL-deref    
    tests: Add tests for timers
           add a test program for lib/command.c
           DejaGNU libzebra bgpd
           add DejaGNU framework
    vtysh: don't append superflous spaces (BZ#750)
	   fix false lib path matching in extract.pl.in
    doc: Modernize INSTALL.quagga.txt.
         update TODO for ospf6d work & bgp multipath
         add OSPFv3 homenet to TODO
    hash: dynamically grow hash table
	  force size to be a power of 2
    guile: remove

build issues:
    lib: remove redundant and incorrect sys/fcntl.h include
    vtysh: fix build against readline 6.3
    tests: fix build & disable testcommands
           don't build tests unless make check is run
           fix Makefile.am so it works with BSD make
           make --disable-bgpd kill bgpd tests too
    build: remove now-useless --{en, dis}able-tests
	   improve backtrace support/detection
	   reference libcap from libzebra (BZ#393,626)
	   fix minimal mixup in gitinfo suffix
	   Update supported versions.
	   update quagga.spec.in
    isisd: use bug-report information from autoconf
    ospf6d: use bug-report information from autoconf
    doc: fix makeinfo errors and one warning

-------------------------------------------------------------------
Wed Jul 30 00:54:36 UTC 2014 - sfalken@opensuse.org

- Updated to 0.99.23
  Changed /var/run to /run in .spec file in order to fix rpmlint check failure in Factory
  Added:
   quagga-0.99.23.tar.xz
   quagga-0.99.23.tar.asc
  Deleted:
   quagga-0.99.22.1.tar.gz
   quagga-0.99.22.1.tar.asc

-------------------------------------------------------------------
Wed Jul 17 13:22:25 UTC 2013 - meissner@suse.com

- fixed source url, added tar.asc and keyring url (unchecked)

-------------------------------------------------------------------
Wed Jul 17 05:41:04 UTC 2013 - boyang@suse.com

- Add return value for table_test.c.

-------------------------------------------------------------------
Fri Apr 19 09:14:03 UTC 2013 - boyang@suse.com

- Update to 0.99.22.1
  major regressions:
    ospfd: restore nexthop IP for p2p interfaces
  minor fixes:
    bgpd: fix lost passwords of grouped neighbors
    lib/vty: register vtysh socket in server socket vector (BZ#754)
    ospfd: fix LSA initialization for build without opaque LSA
    ripd: correctly redistribute ifindex routes (BZ#664)
  build issues:
    build: fix minimal mixup in gitinfo suffix
    build: reference libcap from libzebra (BZ#393,626)
    build: update quagga.spec.in
    doc: fix makeinfo errors and one warning
    tests: make --disable-bgpd kill bgpd tests too
    vtysh: fix false lib path matching in extract.pl.in

-------------------------------------------------------------------
Wed Sep 12 13:45:12 UTC 2012 - coolo@suse.com

- add makeinfo as explicit buildrequire

-------------------------------------------------------------------
Thu Aug  9 11:30:56 UTC 2012 - mrueckert@suse.de

- Update to 0.99.21
  There are some major user-visible changes: 
  [bgpd] BGP multipath support has been merged
  [bgpd] SAFI (Multicast topology) support has been extended to
  propagate the topology to zebra.
  [bgpd] AS path limit functionality has been removed
  [babeld] a new routing daemon implementing the BABEL ad-hoc mesh
  routing protocol has been merged.
  [isisd] a major overhaul has been picked up. Please note that
  isisd is STILL NOT SUITABLE FOR PRODUCTION USE.
  [*] a lot of bugs have been fixed, please refer to the git log
  The number of bugfixes and changes in this release is quite large
  at 446 commits, though some commits are counted twice due to a
  merge of Denis 
  Ovsienko's RE branch some time ago. (Previous releases had around
  50 commits each.) 
- additional changes from 0.99.20.1
  This is a security-fix release that addresses 3 pending CVEs, one
  in bgpd and two in ospfd. The CVEs will be linked once released.
- added quagga-0.99.21_isis_undefined_operations.patch:
  fix compiler warning about undefined operations
- a47c5838e9f445ab887ad927706b11ccbb181364.patch
  Fix typo in isis topology code. Taken from git.
- drop quagga-0.99.20-fix-bgpd-attr-memleak.patch:
  Included upstream
- added options to build tcp-zebra, irdp and pcre:
  all enabled by default
  pcre change might cause problems in edge cases with bgp
  new buildrequires: pcre-devel
- added option to build with isis and isis-topology:
  disabled by default

-------------------------------------------------------------------
Tue Dec  6 23:44:46 UTC 2011 - olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa

- Update package to quagga-0.99.20, remove stale patches.
  added upstream patch to resolve a bgpd memleak

-------------------------------------------------------------------
Wed Nov 23 21:13:40 UTC 2011 - coolo@suse.com

- add libtool as buildrequire to avoid implicit dependency

-------------------------------------------------------------------
Mon Sep 19 02:05:55 UTC 2011 - boyang@suse.com

- DoS while decoding EXTENDED_COMMUNITIES in Quagga's BGP
  [bnc#718062]

-------------------------------------------------------------------
Mon Sep 19 02:05:25 UTC 2011 - boyang@suse.com

- OSPFD DoS while decoding Link State Update [bnc#718061]

-------------------------------------------------------------------
Mon Sep 19 02:04:52 UTC 2011 - boyang@suse.com

- OSPFD DoS while decoding Hello packet [bnc#718059]

-------------------------------------------------------------------
Mon Sep 19 02:04:08 UTC 2011 - boyang@suse.com

- OSPF6D DoS while decoding Database Description packet
  [bnc#718058]

-------------------------------------------------------------------
Mon Sep 19 02:00:52 UTC 2011 - boyang@suse.com

- OSPF6D buffer overflow while decoding Link State Update with
  Inter Area Prefix Lsa [bnc#718056]

-------------------------------------------------------------------
Thu Jun  2 11:25:56 UTC 2011 - boyang@novell.com

- Fix bnc#680499, zebro and ripd won't start [bnc#680499]

-------------------------------------------------------------------
Wed Feb 23 13:10:09 UTC 2011 - prusnak@opensuse.org

- fix CVE-2010-1674 and CVE-2010-1675 [bnc#654270]

-------------------------------------------------------------------
Tue Nov  9 14:58:33 UTC 2010 - prusnak@opensuse.org

- mark /var/run/quagga as ghost, create it in initscript
  [Fate#303793]

-------------------------------------------------------------------
Tue Nov  9 14:39:00 UTC 2010 - prusnak@opensuse.org

- updated to 0.99.17 - fixes [bnc#634300]
  bgpd:
    fix handling of AS path data
    tighten bounds checking in RR ORF msg reader
  ospfd:
    Only refresh external default route once.
    Make sure ospf_distribute_list_update_timer() eventually runs.
    Make sure all external routes are updated.
  zebra:
    fix infinite loop when deleting an interface
  ospf6d:
    Fix crash when '[no] ipv6 ospf6 advertise prefix-list' is in startup-config
  isisd:
    change ISIS_METHOD to use C preprocessor
  other:
    build: ignore mkinstalldirs and texinfo.tex
    build: Add QuaggaId to README.NetBSD
    build/extra: Enhance README.NetBSD make/gmake decision.
    git: add pointers to out-of-tree work
    git: add (generated) m4 files to .gitignore
    Update for git and emphasize asking for good reports.
    doc: fixed spelling in bgpd.texi

-------------------------------------------------------------------
Tue Nov  9 14:38:24 UTC 2010 - prusnak@opensuse.org

- updated to 0.99.16
  bgpd:
    use monotonic clock for time of day
    code cleanup
    compile warnings cleanup
    work around warning in assegments_parse()
  ospfd:
    fix debug messages that were masked by DISCARD_LSA
    remove unneeded memset from a very hot function
    VTY strings cleanup
    comment out unused function
    make local functions static
    enable more OSPF cost command aliases
  lib:
    fix memory logging
    make some structures constant
    move check_bit into prefix common code
    fix warning on little endian
    make match functions take const args
    remove unused function: route_dump_node()
    log source of vty connections (bug #566)
  zebra:
    change router-id selection algo
    deal with irdp compile warnings
    cleanup RIB meta queue code
    fix more warnings in rtadv
    fix more compiler warnings
    remove unused function to fix warning
    handle RTF_CLONING removal from FreeBSD 8.0
    fix argument reference in strncpy() call for BSD
    fix RIB debug message for IPv6
    make declaration const in rtm_flag_dump()
    fix router advertisements for non-Ethernet link layer addresses
  ospf6d:
    remove dead code
    fix warnings from recent prefix bit commit
    review LSA sequence number comparison
    fix LSA locking in ospf6_new_ls_id()
  other:
    ripd: fix compiler warnings
    ripngd: compiler warnings cleanup
    isisd: fix --enable-isis-topology for 64-bit Linux
    isisd: fix BPF ioctl() calls, treat "true" and "false" as reserved
    configure: fix spelling
    configure: fix HAVE_CLOCK_MONOTONIC spelling

-------------------------------------------------------------------
Thu Dec  3 14:40:18 CET 2009 - prusnak@suse.cz

- updated to 0.99.15
  * bgpd:
    fix md5 set on listen sockets
    missing pieces from listener patch
    Workaround for invalid MBGP next hop
    Allow inbound connections to non-default view
    fd leak in bgpd
    Delete AS_CONFED_SEQUENCE when prepending an AS_SEQUENCE type segment
    Implement BGP confederation error handling (RFC5065, Par. 5)
    start listener on first instance
    peer action table static/const
    Restore ability of 'neighbor ... update-source' to take interface name
  * ospfd:
    Make sure priority is respected.
    Tighten up the connected check for redistribution
    fix performance problem with redistribute delete
    Make sure route table is recalculated.
    Make "Packet ... received on wrong link" conditional on debug
    Change struct ospf_path *oi to ifindex.
    Discriminate better when selecting links between vertices in SPF
    Make ospf_if_lookup_recv_if() find the right unnumbered i/f
    export ospf_if_table_lookup() and use it in ospf_network_run_interface()
  * ospf6d:
    bug #529, fix endianness problem in earlier commit
  * ripd:
    set IP TOS for control socket
  * zebra:
    do not touch socket before pidfile locking
  * doc:
    zebra.8 via Christian Hammers (#531)

-------------------------------------------------------------------
Wed Aug  5 13:11:13 CEST 2009 - prusnak@suse.cz

- updated to 0.99.14
  * lib:
    Fix IPv6 normalisation
    Allow for large-file support, e.g. for log files >2GB
  * zebra:
    Silence noisy process_subq
    RFC 4191 Default Router Preference support for router advertisements
    linux policy routing support with ipv6
    Static route does not reach kernel.
  * bgpd:
    Fix nexthop reachability check on confederations
    fix typo made by paul in previous commit
    Avoid zombie accepted peer entries
    Small buffer overrun in bgp_clear_node_queue_init
    Stability fixes including bugs 397, 492
    Fix compiler warnings related to MD5
    Bug #533: Fix crash with copy/pasted commands, inc 'no bgp ...'
    Log a debug/update warning if filters are configured but don't exist
    Add 'show ip bgp view WORD neighbors IP (advertised|received)-routes'
    review 32-bit AS-path hotfix for 0.99.12
    Fix "show ip bgp dampened-paths" garbage output.
    Fixes to RFC2385/MD5 BGP
  * ospfd:
    Do not use stale Network/Router LSAs
    compare ifIndex too when matching paths
    external LSA route_unlock_node() fixes
    Fix a few LSA performance "bugs"
    discount IP header size from a new LSA pkt
    cancel OSPF timer hack in nsm_change_state
  * ospf6d:
    Fix regression in monotonic time patch - LSA max-aging broke
  * vtysh:
    Save vtysh history to a file
    Fix vtysh based "write term" output.
  * doc:
    Add "--disable-doc" to configure

-------------------------------------------------------------------
Wed Jul 15 15:41:49 CEST 2009 - prusnak@suse.cz

- updated to 0.99.13
  * build:
    [configure] fix check for GNU awk/gawk to abort ./configure if missing
    [configure] add configure support for PCRE Posix library
    [configure] Detect support for monotonic clock
  * zebra:
    [zebra] Force rib_update when connected route deleted
    [zebra] Only announce connected routes if link is detected
    [zebra] MTU is unsigned
    [zebra] remove incorrect debug message
    [zebra] Cleanup meta-queue code
    [zebra] netlink interface minor cleanup
    [zebra] Fix vyatta bug 2814: Add "show ip route summary" command.
  * bgpd:
    [bgpd] Fix 'update-source' command: It doesn't accept interface names
    [bgpd] reference count the BGP instance
    [bgpd] Add support for the old Linux 2.4, TCP_MD5_AUTH RFC2385 patch
    [bgpd] Fixed as-path prepend/exclude ASN handling
    [bgp] Fix crash on SIGHUP, deref of freed workqueues
    [bgpd] 64-bit bugfix in community_del_val
  * ospfd:
    [ospfd] Fix OSPF route refcount leak
    [ospfd] fix vty ospfd no ospf abr-type standard
  * ospf6d:
    Convert ospf6d over to quagga_gettime() wrappers.
    [ospf6d] Remove 'no router' from OSPF6_NODE
    [ospf6d] Fix ospf6d crash if removing interface with no area
    [ospf6d] Fix ospf6d crash in show border routers
    [ospf6] Add no router ospf6
    [ospf6d] Fix ospf6d crash if range defined twice
  * ripd:
    [ripd] Ignore non-running interfaces in rip status
    [ripd] Fix metrix in call to rip_zebra_ipv4_delete
  * vtysh:
    [vtysh] Add a --noerror option
    [vtysh] Return non-zero exit code on error.
    [vtysh] Make vtysh more useable for scripting
    [vtysh] Force line buffered mode.
  * misc:
    [daemons/cleanup] Remove disabled log_mode argument support.
    [lib] Put symbolic backtrace on system log
    [lib] sockopt_tcp_signature: sin6 requires HAVE_IPV6
    [smux] 64-bit fix for lib/smux.h SNMP_INTEGER() macro

-------------------------------------------------------------------
Wed May 13 11:45:25 CEST 2009 - prusnak@suse.cz

- updated to 0.99.12
  * bgpd:
    Fix bgp ipv4/ipv6 accept handling
    [bgpd] AS4 bugfix by Chris Caputo 
    [bgpd] Add 'show bgp views' command
    [bgpd] Allow accepted peers to progress even if realpeer is in Connect
  * ospfd:
    [lib] Move type cast in Fletcher checksum
    [lib] Switch Fletcher checksum back to old ospfd version
    Justified OSPF cost function names and added support for:
     ospf cost <1-65535> A.B.C.D
     no ospf cost <1-65535>
  * library:
    [lib] Fix timer precision.
    [lib] fix missing sockunion_normalise_mapped
  * vtysh:
    [vtysh] Add commands from zebra_routemap.c to vtysh
  * misc:
    [build] tools/multiple-bgpd.sh should be in 'make dist'
- added logrotate to Recommends
- removed obsoleted patches:
  * bgpd-asn-dos.patch (mainline)

-------------------------------------------------------------------
Thu May  7 14:16:16 CEST 2009 - prusnak@suse.cz

- fixed crash (DoS) in BGP daemon via an ASN elements
  (bgpd-asn-dos.patch) [bnc#500540]

-------------------------------------------------------------------
Mon Jan 19 14:09:55 CET 2009 - prusnak@suse.cz

- updated to 0.99.11
  * bgpd:
    - Document the FSM dummy-peer race that sometimes afflicts
      session setup
    - Fix definition of an rsclient command
    - Fix double-free crash in bgp_table_finish, seen with rs-client
    - Fix triggerable crash when compiled with --disable-bgp-announce
    - TCP-MD5: password vty configuration and initial Linux support
  * isisd:
    - Try open vanity-named DLPI dev before style 1,2
    - Fix packet filtering with DLPI
    - Switch to lib/ Fletcher checksum, fixing bug in isisd
  * lib:
    - Add fletcher checksum implementation
    - Add support for a 'restricted mode' with anonymous vty
      connections
    - Allow delete during password entry
    - CMD_AS_RANGE accidently quoted and so not expanded in vty
  * ospfd:
    - Default route needs to be refreshed after neighbour state change
    - Fix SEGV during startup introduced in recent commit
    - Move passive interface check
    - Restructure opsf_if_update() and ospf_network_run()
    - Fix SEGV in ip ospf neighbor all
    - Ignore host routes to self.
    - Set destination for PtP links to OSPF_ALLSPFROUTERS
  * zebra:
    - Filter out unwanted netlink messages by PID
    - clean up blocking setting of netlink sockets
    - netlink buffer size tweaking only needed on receive socket
    - netlink: no need to change privs for receive
    - netlink: quiet harmless errors
    - Set proto/scope on all route update messages
    - Make BSD link-state deal more gracefully with GIFMEDIA ioctl
      error
    - ignore dead routes in RIB update

-------------------------------------------------------------------
Fri Sep 12 20:56:45 CEST 2008 - crrodriguez@suse.de

- disable static libraries

-------------------------------------------------------------------
Thu Aug 28 23:20:32 CEST 2008 - cthiel@suse.de

- fix init scripts

-------------------------------------------------------------------
Mon Jul 28 11:10:30 CEST 2008 - prusnak@suse.cz

- updated to 0.99.10
  * [bgpd] 4-byte AS support added
  * [bgpd] MRT format changes to version 2.
    Those relying on bgpd MRT table dumps may need to update their tools.
  * [bgpd] Added new route-map set statement: "as-path exclude"
  * Zebra RIB updates queue has evolved into a multi-level structure
    to address RIB consistency issues.
- removed obsoleted patch:
  * badshift.patch (included in update)

-------------------------------------------------------------------
Tue Jan  8 12:39:33 CET 2008 - prusnak@suse.cz

- fixed bad left shift (badshift.patch) [#351517]

-------------------------------------------------------------------
Tue Sep 25 11:46:52 CEST 2007 - prusnak@suse.cz

- updated to 0.99.9
  * added support for separate link-layer access mechanisms in isisd
  * add back check for inet_aton, which got dropped somehow
    in previous jumbo patch
  * use AC_GNU_SOURCE to define _GNU_SOURCE, rather than having
    lib/zebra.h do it
  * AC_FUNC_STRNLEN has side-effects with latest autoconf,
    use AC_CHECK_FUNC on strnlen instead
  * general cleanup of header and type checks, introducing an internal
    define, QUAGGA_INCLUDES, to build up a list of stuff to include so
    as to avoid 'present but cant be compiled' warnings
  * misc additional checks of things missing according to autoscan
  * add LIBM, for bgpd's use of libm, so as to avoid burdening LIBS,
    and all the binaries, with libm linkage
  * remove the bad practice of using m4 changequote(),
    just quote the []'s in the case statements properly
  * update all HAVE_* to the standard autoconf namespaced HAVE_* defines
    (i.e. HAVE_SA_LEN->HAVE_STRUCT_SOCKADDR_SA_LEN)
  * add LIBM to bgpd's LDADD, for pow()
  * change gcc CFLAGS from '-std=c99' to '-std=gnu99' to improve
    portability
- dropped obsolete patches:
  * strcmp.patch (included in update)

-------------------------------------------------------------------
Thu Sep 13 16:19:26 CEST 2007 - prusnak@suse.cz

- backported security fixes for bgpd from 0.99.9 [#310166]

-------------------------------------------------------------------
Thu Jun  7 15:47:55 CEST 2007 - prusnak@suse.cz

- removed broken strict-aliasing.patch
- added -fno-strict-aliasing to CFLAGS

-------------------------------------------------------------------
Wed Jun  6 17:14:52 CEST 2007 - prusnak@suse.cz

- updated to 0.99.7
- added mandatory LSB tags Short-Description to init files
- added %run_ldconfig to %post and %postun sections
- cleaned spec file
- dropped obsolete patches:
  * CVE-2007-1995.patch (included in update)

-------------------------------------------------------------------
Tue Apr 24 19:30:49 CEST 2007 - anosek@suse.cz

- updated to version 0.99.6
  * bgpd
    o Bug #302, bgpd can get stuck in state Clearing
    o Implement 'debug bgp zebra' to log all messages to and from zebra.
    o Fix bug where a deleted route that was quickly re-added was being lost
    o trivial: non C99 u_int.._t should be uint.._t
    o struct peer must have bgp field valid (redistribute crash)
    o Coverity CID #64: Needless NULL check, CID #64: Deref of potentially NULL pointer.
    o CID#73, potential crash in bgp statistics if called for AFI/SAFI with emtpy table
    o Bug #302 fixes. ClearingCompleted event gets flushed, leaving peers stuck in Clearing.
    o Trivial fix of printf format/arg mismatch
    o reduce the process queue hold time to something more sensible
    o RIB statistics address space size shouldnt double count space
    o simplify peer refcounts, squash slow peer leak
    o Fix 0.99 shutdown regression, introduce Clearing and Deleted states
    o Add RIB reporting commands, show bgp ... statistics
    o Handle pcount as flags are changed, fixing pcount issues
    o Add 'show ... neighbor .... prefix-counts' command
  * ospfd
    o Consider all connected addresses when creating ospf interfaces
    o Add debug messages for a few zebra messages that had been overlooked
    o Fix bug in passive-interface default commands.
    o Stop losing subsequent default-information originate 'always' info
    o Add passive-interface default support
    o Improve some warning messages.
    o Fix assertion in DB-exchange fix, hit by ogier-db-ex-opt commit
  * isisd: Fix compiler warnings and allow v4-only compilation
  * zebra
    o Changes of nexthops of static routes didnt take effect
    o Compile fix for PF_ROUTE
  * ripd
    o bug #293: routemap set metric doesn't check for underflow correctly
    o bug #278: remove gratuitous use of mid-function declaration
  * general
    o [daemon startup] Add --dry-run/-C argument to daemons, to check config file syntax
    o Handle upgrade from SUNWzebra to Quagga for 'interface fooX:Y' commands
    o [snmp] Fix asn_build calls to pass correct variable sizes (fixes 64-bit issues)
    o [doc] Add recent NetBSD/FreeBSD versions to list of what ought to work.
- dropped obsolete patches snmp.diff, nextnode.diff
- fixed VUL-0: quagga DoS [#266100] (CVE-2007-1995.patch)

-------------------------------------------------------------------
Tue Jan 23 11:31:11 CET 2007 - prusnak@suse.cz

- fixed insufficient strcmp.diff

-------------------------------------------------------------------
Wed Dec 20 14:28:56 CET 2006 - prusnak@suse.cz

- fixed "nextnode" misuse

-------------------------------------------------------------------
Tue Dec 19 14:48:51 CET 2006 - prusnak@suse.cz

- fixed "comparison with string literal" [#228420]

-------------------------------------------------------------------
Mon Aug 21 21:34:34 CEST 2006 - kukuk@suse.de

- Fix PAM config to work on lib64 archs.

-------------------------------------------------------------------
Thu Aug  3 10:44:16 CEST 2006 - mmarek@suse.cz

- updated to version 0.98.6
  * comtains latest security fixes, obsoleting CVE-2006-2223-4.patch
  * some ospfd bugfixes
- dropped netlink-fix.diff, which has been obsolete for some time

-------------------------------------------------------------------
Fri Jun 16 23:16:41 CEST 2006 - schwab@suse.de

- Remove old and broken libtool macros.

-------------------------------------------------------------------
Fri May 12 12:36:37 CEST 2006 - mmarek@suse.cz

- fixed ripd not configurable to protect routing table from
  malicious updates (CVE-2006-2223, CVE-2006-2224)
  [#173828] (CVE-2006-2223-4.patch)

-------------------------------------------------------------------
Wed Jan 25 21:41:03 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Tue Jan 24 13:04:36 CET 2006 - mmarek@suse.cz

- use $RPM_OPT_FLAGS (missing backslash)
- check for /proc/net/{dev,route,snmp} before build

-------------------------------------------------------------------
Tue Nov 22 12:52:44 CET 2005 - mmarek@suse.cz

- don't try to create fake directories under /proc (we don't build
  as root since Fri Jan 16 13:23:46 CET 2004), but print an error
  instead.

-------------------------------------------------------------------
Tue Oct 11 15:21:40 CEST 2005 - mmarek@suse.cz

- better strict aliasing fix

-------------------------------------------------------------------
Mon Oct 10 14:04:33 CEST 2005 - mmarek@suse.cz

- update to 0.98.5

-------------------------------------------------------------------
Tue Sep 20 15:36:20 CEST 2005 - mmarek@suse.cz

- fixx gcc warnings

-------------------------------------------------------------------
Mon Aug  1 14:54:29 CEST 2005 - anicka@suse.cz

- update to 0.98.4

-------------------------------------------------------------------
Tue Apr 19 16:14:53 CEST 2005 - postadal@suse.de

- updated to version 0.98.3
- removed obsoleted patch config.diff
- use parallel make

-------------------------------------------------------------------
Thu Jan 13 13:11:54 CET 2005 - postadal@suse.cz

- updated to version 0.98.0
  * some commands may have been removed or have had their syntax changed

- removed obsoleted patch gcc-warnings-fix.diff

-------------------------------------------------------------------
Fri Nov 26 12:32:13 CET 2004 - postadal@suse.cz

- fixed lib64 path

-------------------------------------------------------------------
Thu Nov 25 17:47:35 CET 2004 - postadal@suse.cz

- updated to version 0.97.3
- fixed gcc warnings
- created subpackage "quagga-devel"

-------------------------------------------------------------------
Wed Aug 11 16:39:11 CEST 2004 - postadal@suse.cz

- updated to version 0.96.5

-------------------------------------------------------------------
Thu Jun 17 11:47:07 CEST 2004 - postadal@suse.cz

- enabled multipath for High Availability scenario [#41789]

-------------------------------------------------------------------
Wed Feb 11 19:04:58 CET 2004 - postadal@suse.cz

- updated to version 0.96.4
- fixed instalation problems [#33015]
- added quagga user/group
- removed obsoleted patch vty_telnet_option-fix

-------------------------------------------------------------------
Mon Jan 19 16:13:05 CET 2004 - postadal@suse.cz

- fixed security bug [#33993] (CAN-2003-0858): local users could send malicious
  netlink messages that cause DoS condition

- fixed DoS condition, which exists in zebra when layer 3 access is possible
  to the telnet management port 2601/tcp. (CAN-2003-0795) [#32656]

-------------------------------------------------------------------
Fri Jan 16 13:23:46 CET 2004 - kukuk@suse.de

- Add pam-devel to neededforbuild
- Build as user

-------------------------------------------------------------------
Mon Nov 10 15:43:34 CET 2003 - ro@suse.de

- use net-snmp instead of ucdsnmp

-------------------------------------------------------------------
Fri Nov 07 19:28:06 CET 2003 - postadal@suse.cz

- fixed DoS condition, which exists in zebra when layer 3 access is possible
  to the telnet management port 2601/tcp. (CAN-2003-0795) [#32656]

-------------------------------------------------------------------
Tue Aug 26 15:26:46 CEST 2003 - postadal@suse.cz

- updated to bugfix version 0.96.2
  * fixed a small but very annoying ospfd bug
  * command.c newline fix

-------------------------------------------------------------------
Mon Aug 25 17:55:25 CEST 2003 - postadal@suse.cz

- Zebra-pj has now forked from GNU Zebra. The new name is Quagga.
- update to version 0.96.1
- use new stop_on_removal/restart_on_upate macros

-------------------------------------------------------------------
Mon Jul 28 20:46:37 CEST 2003 - postadal@suse.cz

- fixed ripngd init script [#27097]

-------------------------------------------------------------------
Fri Jul 25 16:30:28 CEST 2003 - mludvig@suse.cz

- Update to Paul Jakma's Zebra fork. This is the only
  Zebra version currently maintained.

-------------------------------------------------------------------
Thu Apr 24 12:20:23 CEST 2003 - ro@suse.de

- fix install_info --delete call and move from preun to postun

-------------------------------------------------------------------
Thu Feb 13 00:34:58 CET 2003 - mmj@suse.de

- Use %install_info macro [#23478]

-------------------------------------------------------------------
Wed Nov 27 13:21:37 CET 2002 - postadal@suse.cz

- added kame-fix patch of mludvig@suse.cz
- bzipped source and rc.* moved to rc.tar.bz2 (init/SuSE/*)

-------------------------------------------------------------------
Thu Sep 26 12:19:43 CEST 2002 - mludvig@suse.cz

- Upgrade to zebra-0.93b
- Added pam script

-------------------------------------------------------------------
Fri Aug 16 16:27:23 CEST 2002 - postadal@suse.cz

- added %insserv_prereq and %fillup_prereq to PreReq [#18024]

-------------------------------------------------------------------
Sat Jul 27 18:49:17 CEST 2002 - adrian@suse.de

- do not source rc.config

-------------------------------------------------------------------
Wed May 15 14:26:04 CEST 2002 - schwab@suse.de

- Use autoreconf.

-------------------------------------------------------------------
Mon Feb 25 17:19:45 CET 2002 - postadal@suse.cz

- modified copyright of files in /etc/init.d

-------------------------------------------------------------------
Thu Jan 10 11:40:06 CET 2002 - egmont@suselinux.hu

- changed /sbin/init.d to /etc/init.d in init script comments

-------------------------------------------------------------------
Tue Dec 11 12:35:32 CET 2001 - cihlar@suse.cz

- removed START_* variables
- fixed init scripts to fit skeleton
- fixed file list

-------------------------------------------------------------------
Tue Nov  6 10:20:55 CET 2001 - cihlar@suse.cz

- fixed to compile with automake 1.5

-------------------------------------------------------------------
Mon Aug 27 14:37:13 CEST 2001 - dan@suse.cz

- update to 0.92a release
        * Fix community-list "^$" matching bug
        * -lsnmp check problem fixed
- build root added, spec file clean-up
- installing info pages fixed

-------------------------------------------------------------------
Tue Aug 14 19:31:01 CEST 2001 - ro@suse.de

- up to 0.91a and fixed for current autoconf

-------------------------------------------------------------------
Mon May 14 14:35:48 CEST 2001 - lmuelle@suse.de

- fix typo in ripd startscript
- bzip2 sources

-------------------------------------------------------------------
Tue May  8 17:13:03 CEST 2001 - strbac@suse.de

- remove init scripts and symlinks for vtysh (it's not a daemon)

-------------------------------------------------------------------
Fri Feb 23 00:10:25 CET 2001 - ro@suse.de

- added readline/readline-devel to neededforbuild (split from bash)

-------------------------------------------------------------------
Wed Jan 17 15:34:20 MET 2001 - bk@suse.de

- updated to 0.90a, fixes serious bug of bgpd when receiving routes
- fixed a bug in configure(.in) to detect *-suse-linux as linux
- replaced ipv6 configure diff with the configure option --enable-ipv6
- call autoconf to generate the fixed confgure (never patch configure)
- set CFLAGS to RPM_OPT_FLAGS for configure
- folded up configure argument list to make it more readable

-------------------------------------------------------------------
Thu Jan 11 16:56:00 CET 2001 - smueller@suse.de

- make it compile with IPv6 even if there is no IPv6 in the
  running kernel

-------------------------------------------------------------------
Thu Jan 11 11:00:01 CET 2001 - smueller@suse.de

- update to zebra 0.90
- enabled snmp support

-------------------------------------------------------------------
Thu Dec 21 04:50:55 CET 2000 - smueller@suse.de

- rc.config injection corrected

-------------------------------------------------------------------
Wed Dec 20 07:26:44 CET 2000 - smueller@suse.de

- changed absolut path names to relative in %post

-------------------------------------------------------------------
Tue Dec 05 10:20:00 CET 2000 - bjacke@suse.de

- bzipped sources
- cleaned up spec file
- enabled IPv6 support

-------------------------------------------------------------------
Mon Dec 04 10:30:33 CET 2000 - smueller@suse.de

- initial version for 7.1

Places

File quagga.changes of Package quagga.openSUSE_Leap_42.1_Update (Revision 666ce647968168bd05a712b11f07062b)

Places