Changelog for quagga-0.99.17-1.11.1.i586.rpm :
Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- DoS while decoding EXTENDED_COMMUNITIES in Quagga\'s BGP
[bnc#718062]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPFD DoS while decoding Link State Update [bnc#718061]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPFD DoS while decoding Hello packet [bnc#718059]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPF6D DoS while decoding Database Description packet
[bnc#718058]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPF6D buffer overflow while decoding Link State Update with
Inter Area Prefix Lsa [bnc#718056]

Thu Jun 2 14:00:00 2011 boyangAATTnovell.com
- Fix bnc#680499, zebro and ripd won\'t start [bnc#680499]

Wed Feb 23 13:00:00 2011 prusnakAATTopensuse.org
- fix CVE-2010-1674 and CVE-2010-1675 [bnc#654270]

Tue Nov 9 13:00:00 2010 prusnakAATTopensuse.org
- mark /var/run/quagga as ghost, create it in initscript
[Fate#303793]

Tue Nov 9 13:00:00 2010 prusnakAATTopensuse.org
- updated to 0.99.17 - fixes [bnc#634300]
bgpd:
fix handling of AS path data
tighten bounds checking in RR ORF msg reader
ospfd:
Only refresh external default route once.
Make sure ospf_distribute_list_update_timer() eventually runs.
Make sure all external routes are updated.
zebra:
fix infinite loop when deleting an interface
ospf6d:
Fix crash when \'[no] ipv6 ospf6 advertise prefix-list\' is in startup-config
isisd:
change ISIS_METHOD to use C preprocessor
other:
build: ignore mkinstalldirs and texinfo.tex
build: Add QuaggaId to README.NetBSD
build/extra: Enhance README.NetBSD make/gmake decision.
git: add pointers to out-of-tree work
git: add (generated) m4 files to .gitignore
Update for git and emphasize asking for good reports.
doc: fixed spelling in bgpd.texi

Tue Nov 9 13:00:00 2010 prusnakAATTopensuse.org
- updated to 0.99.16
bgpd:
use monotonic clock for time of day
code cleanup
compile warnings cleanup
work around warning in assegments_parse()
ospfd:
fix debug messages that were masked by DISCARD_LSA
remove unneeded memset from a very hot function
VTY strings cleanup
comment out unused function
make local functions static
enable more OSPF cost command aliases
lib:
fix memory logging
make some structures constant
move check_bit into prefix common code
fix warning on little endian
make match functions take const args
remove unused function: route_dump_node()
log source of vty connections (bug #566)
zebra:
change router-id selection algo
deal with irdp compile warnings
cleanup RIB meta queue code
fix more warnings in rtadv
fix more compiler warnings
remove unused function to fix warning
handle RTF_CLONING removal from FreeBSD 8.0
fix argument reference in strncpy() call for BSD
fix RIB debug message for IPv6
make declaration const in rtm_flag_dump()
fix router advertisements for non-Ethernet link layer addresses
ospf6d:
remove dead code
fix warnings from recent prefix bit commit
review LSA sequence number comparison
fix LSA locking in ospf6_new_ls_id()
other:
ripd: fix compiler warnings
ripngd: compiler warnings cleanup
isisd: fix --enable-isis-topology for 64-bit Linux
isisd: fix BPF ioctl() calls, treat \"true\" and \"false\" as reserved
configure: fix spelling
configure: fix HAVE_CLOCK_MONOTONIC spelling

Thu Dec 3 13:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.15

* bgpd:
fix md5 set on listen sockets
missing pieces from listener patch
Workaround for invalid MBGP next hop
Allow inbound connections to non-default view
fd leak in bgpd
Delete AS_CONFED_SEQUENCE when prepending an AS_SEQUENCE type segment
Implement BGP confederation error handling (RFC5065, Par. 5)
start listener on first instance
peer action table static/const
Restore ability of \'neighbor ... update-source\' to take interface name

* ospfd:
Make sure priority is respected.
Tighten up the connected check for redistribution
fix performance problem with redistribute delete
Make sure route table is recalculated.
Make \"Packet ... received on wrong link\" conditional on debug
Change struct ospf_path
*oi to ifindex.
Discriminate better when selecting links between vertices in SPF
Make ospf_if_lookup_recv_if() find the right unnumbered i/f
export ospf_if_table_lookup() and use it in ospf_network_run_interface()

* ospf6d:
bug #529, fix endianness problem in earlier commit

* ripd:
set IP TOS for control socket

* zebra:
do not touch socket before pidfile locking

* doc:
zebra.8 via Christian Hammers (#531)

Wed Aug 5 14:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.14

* lib:
Fix IPv6 normalisation
Allow for large-file support, e.g. for log files >2GB

* zebra:
Silence noisy process_subq
RFC 4191 Default Router Preference support for router advertisements
linux policy routing support with ipv6
Static route does not reach kernel.

* bgpd:
Fix nexthop reachability check on confederations
fix typo made by paul in previous commit
Avoid zombie accepted peer entries
Small buffer overrun in bgp_clear_node_queue_init
Stability fixes including bugs 397, 492
Fix compiler warnings related to MD5
Bug #533: Fix crash with copy/pasted commands, inc \'no bgp ...\'
Log a debug/update warning if filters are configured but don\'t exist
Add \'show ip bgp view WORD neighbors IP (advertised|received)-routes\'
review 32-bit AS-path hotfix for 0.99.12
Fix \"show ip bgp dampened-paths\" garbage output.
Fixes to RFC2385/MD5 BGP

* ospfd:
Do not use stale Network/Router LSAs
compare ifIndex too when matching paths
external LSA route_unlock_node() fixes
Fix a few LSA performance \"bugs\"
discount IP header size from a new LSA pkt
cancel OSPF timer hack in nsm_change_state

* ospf6d:
Fix regression in monotonic time patch - LSA max-aging broke

* vtysh:
Save vtysh history to a file
Fix vtysh based \"write term\" output.

* doc:
Add \"--disable-doc\" to configure

Wed Jul 15 14:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.13

* build:
[configure] fix check for GNU awk/gawk to abort ./configure if missing
[configure] add configure support for PCRE Posix library
[configure] Detect support for monotonic clock

* zebra:
[zebra] Force rib_update when connected route deleted
[zebra] Only announce connected routes if link is detected
[zebra] MTU is unsigned
[zebra] remove incorrect debug message
[zebra] Cleanup meta-queue code
[zebra] netlink interface minor cleanup
[zebra] Fix vyatta bug 2814: Add \"show ip route summary\" command.

* bgpd:
[bgpd] Fix \'update-source\' command: It doesn\'t accept interface names
[bgpd] reference count the BGP instance
[bgpd] Add support for the old Linux 2.4, TCP_MD5_AUTH RFC2385 patch
[bgpd] Fixed as-path prepend/exclude ASN handling
[bgp] Fix crash on SIGHUP, deref of freed workqueues
[bgpd] 64-bit bugfix in community_del_val

* ospfd:
[ospfd] Fix OSPF route refcount leak
[ospfd] fix vty ospfd no ospf abr-type standard

* ospf6d:
Convert ospf6d over to quagga_gettime() wrappers.
[ospf6d] Remove \'no router\' from OSPF6_NODE
[ospf6d] Fix ospf6d crash if removing interface with no area
[ospf6d] Fix ospf6d crash in show border routers
[ospf6] Add no router ospf6
[ospf6d] Fix ospf6d crash if range defined twice

* ripd:
[ripd] Ignore non-running interfaces in rip status
[ripd] Fix metrix in call to rip_zebra_ipv4_delete

* vtysh:
[vtysh] Add a --noerror option
[vtysh] Return non-zero exit code on error.
[vtysh] Make vtysh more useable for scripting
[vtysh] Force line buffered mode.

* misc:
[daemons/cleanup] Remove disabled log_mode argument support.
[lib] Put symbolic backtrace on system log
[lib] sockopt_tcp_signature: sin6 requires HAVE_IPV6
[smux] 64-bit fix for lib/smux.h SNMP_INTEGER() macro

Wed May 13 14:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.12

* bgpd:
Fix bgp ipv4/ipv6 accept handling
[bgpd] AS4 bugfix by Chris Caputo
[bgpd] Add \'show bgp views\' command
[bgpd] Allow accepted peers to progress even if realpeer is in Connect

* ospfd:
[lib] Move type cast in Fletcher checksum
[lib] Switch Fletcher checksum back to old ospfd version
Justified OSPF cost function names and added support for:
ospf cost <1-65535> A.B.C.D
no ospf cost <1-65535>

* library:
[lib] Fix timer precision.
[lib] fix missing sockunion_normalise_mapped

* vtysh:
[vtysh] Add commands from zebra_routemap.c to vtysh

* misc:
[build] tools/multiple-bgpd.sh should be in \'make dist\'
- added logrotate to Recommends
- removed obsoleted patches:

* bgpd-asn-dos.patch (mainline)

Thu May 7 14:00:00 2009 prusnakAATTsuse.cz
- fixed crash (DoS) in BGP daemon via an ASN elements
(bgpd-asn-dos.patch) [bnc#500540]

Mon Jan 19 13:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.11

* bgpd:
- Document the FSM dummy-peer race that sometimes afflicts
session setup
- Fix definition of an rsclient command
- Fix double-free crash in bgp_table_finish, seen with rs-client
- Fix triggerable crash when compiled with --disable-bgp-announce
- TCP-MD5: password vty configuration and initial Linux support

* isisd:
- Try open vanity-named DLPI dev before style 1,2
- Fix packet filtering with DLPI
- Switch to lib/ Fletcher checksum, fixing bug in isisd

* lib:
- Add fletcher checksum implementation
- Add support for a \'restricted mode\' with anonymous vty
connections
- Allow delete during password entry
- CMD_AS_RANGE accidently quoted and so not expanded in vty

* ospfd:
- Default route needs to be refreshed after neighbour state change
- Fix SEGV during startup introduced in recent commit
- Move passive interface check
- Restructure opsf_if_update() and ospf_network_run()
- Fix SEGV in ip ospf neighbor all
- Ignore host routes to self.
- Set destination for PtP links to OSPF_ALLSPFROUTERS

* zebra:
- Filter out unwanted netlink messages by PID
- clean up blocking setting of netlink sockets
- netlink buffer size tweaking only needed on receive socket
- netlink: no need to change privs for receive
- netlink: quiet harmless errors
- Set proto/scope on all route update messages
- Make BSD link-state deal more gracefully with GIFMEDIA ioctl
error
- ignore dead routes in RIB update

Fri Sep 12 14:00:00 2008 crrodriguezAATTsuse.de
- disable static libraries

Thu Aug 28 14:00:00 2008 cthielAATTsuse.de
- fix init scripts

Mon Jul 28 14:00:00 2008 prusnakAATTsuse.cz
- updated to 0.99.10

* [bgpd] 4-byte AS support added

* [bgpd] MRT format changes to version 2.
Those relying on bgpd MRT table dumps may need to update their tools.

* [bgpd] Added new route-map set statement: \"as-path exclude\"

* Zebra RIB updates queue has evolved into a multi-level structure
to address RIB consistency issues.
- removed obsoleted patch:

* badshift.patch (included in update)

Tue Jan 8 13:00:00 2008 prusnakAATTsuse.cz
- fixed bad left shift (badshift.patch) [#351517]

Tue Sep 25 14:00:00 2007 prusnakAATTsuse.cz
- updated to 0.99.9

* added support for separate link-layer access mechanisms in isisd

* add back check for inet_aton, which got dropped somehow
in previous jumbo patch

* use AC_GNU_SOURCE to define _GNU_SOURCE, rather than having
lib/zebra.h do it

* AC_FUNC_STRNLEN has side-effects with latest autoconf,
use AC_CHECK_FUNC on strnlen instead

* general cleanup of header and type checks, introducing an internal
define, QUAGGA_INCLUDES, to build up a list of stuff to include so
as to avoid \'present but cant be compiled\' warnings

* misc additional checks of things missing according to autoscan

* add LIBM, for bgpd\'s use of libm, so as to avoid burdening LIBS,
and all the binaries, with libm linkage

* remove the bad practice of using m4 changequote(),
just quote the []\'s in the case statements properly

* update all HAVE_
* to the standard autoconf namespaced HAVE_
* defines
(i.e. HAVE_SA_LEN->HAVE_STRUCT_SOCKADDR_SA_LEN)

* add LIBM to bgpd\'s LDADD, for pow()

* change gcc CFLAGS from \'-std=c99\' to \'-std=gnu99\' to improve
portability
- dropped obsolete patches:

* strcmp.patch (included in update)

Thu Sep 13 14:00:00 2007 prusnakAATTsuse.cz
- backported security fixes for bgpd from 0.99.9 [#310166]

Thu Jun 7 14:00:00 2007 prusnakAATTsuse.cz
- removed broken strict-aliasing.patch
- added -fno-strict-aliasing to CFLAGS

Wed Jun 6 14:00:00 2007 prusnakAATTsuse.cz
- updated to 0.99.7
- added mandatory LSB tags Short-Description to init files
- added %run_ldconfig to %post and %postun sections
- cleaned spec file
- dropped obsolete patches:

* CVE-2007-1995.patch (included in update)

Tue Apr 24 14:00:00 2007 anosekAATTsuse.cz
- updated to version 0.99.6

* bgpd
o Bug #302, bgpd can get stuck in state Clearing
o Implement \'debug bgp zebra\' to log all messages to and from zebra.
o Fix bug where a deleted route that was quickly re-added was being lost
o trivial: non C99 u_int.._t should be uint.._t
o struct peer must have bgp field valid (redistribute crash)
o Coverity CID #64: Needless NULL check, CID #64: Deref of potentially NULL pointer.
o CID#73, potential crash in bgp statistics if called for AFI/SAFI with emtpy table
o Bug #302 fixes. ClearingCompleted event gets flushed, leaving peers stuck in Clearing.
o Trivial fix of printf format/arg mismatch
o reduce the process queue hold time to something more sensible
o RIB statistics address space size shouldnt double count space
o simplify peer refcounts, squash slow peer leak
o Fix 0.99 shutdown regression, introduce Clearing and Deleted states
o Add RIB reporting commands, show bgp ... statistics
o Handle pcount as flags are changed, fixing pcount issues
o Add \'show ... neighbor .... prefix-counts\' command

* ospfd
o Consider all connected addresses when creating ospf interfaces
o Add debug messages for a few zebra messages that had been overlooked
o Fix bug in passive-interface default commands.
o Stop losing subsequent default-information originate \'always\' info
o Add passive-interface default support
o Improve some warning messages.
o Fix assertion in DB-exchange fix, hit by ogier-db-ex-opt commit

* isisd: Fix compiler warnings and allow v4-only compilation

* zebra
o Changes of nexthops of static routes didnt take effect
o Compile fix for PF_ROUTE

* ripd
o bug #293: routemap set metric doesn\'t check for underflow correctly
o bug #278: remove gratuitous use of mid-function declaration

* general
o [daemon startup] Add --dry-run/-C argument to daemons, to check config file syntax
o Handle upgrade from SUNWzebra to Quagga for \'interface fooX:Y\' commands
o [snmp] Fix asn_build calls to pass correct variable sizes (fixes 64-bit issues)
o [doc] Add recent NetBSD/FreeBSD versions to list of what ought to work.
- dropped obsolete patches snmp.diff, nextnode.diff
- fixed VUL-0: quagga DoS [#266100] (CVE-2007-1995.patch)

Tue Jan 23 13:00:00 2007 prusnakAATTsuse.cz
- fixed insufficient strcmp.diff

Wed Dec 20 13:00:00 2006 prusnakAATTsuse.cz
- fixed \"nextnode\" misuse

Tue Dec 19 13:00:00 2006 prusnakAATTsuse.cz
- fixed \"comparison with string literal\" [#228420]

Mon Aug 21 14:00:00 2006 kukukAATTsuse.de
- Fix PAM config to work on lib64 archs.

Thu Aug 3 14:00:00 2006 mmarekAATTsuse.cz
- updated to version 0.98.6

* comtains latest security fixes, obsoleting CVE-2006-2223-4.patch

* some ospfd bugfixes
- dropped netlink-fix.diff, which has been obsolete for some time