Changelog for quagga-devel-0.99.24.1-16.13.x86_64.rpm :
Wed May 4 14:00:00 2016 pwieczorkiewiczAATTsuse.com
- Add quagga-CVE-2016-4049-fix-buf-ovflow-bgp-dump-routes.patch:
Fix for a buffer overflow error in bgp_dump_routes_func.
(CVE-2016-4049, bsc#977012)

Thu Mar 31 14:00:00 2016 pwieczorkiewiczAATTsuse.com
- Disallow unprivileged users to enter config directory /etc/quagga
(group: quagga, mode: 750) and read configuration files installed
there (group: quagga, mode: 640). (boo#770619)

Wed Mar 16 13:00:00 2016 pwieczorkiewiczAATTsuse.com
- Add quagga-CVE-2016-2342-VPNv4-NLRI-memcpy-stack-overflow.patch:
Extend the prefixlen check to ensure it is within the bound of
the NLRI packet data AND the on-stack prefix structure AND the
maximum size for the address family. (CVE-2016-2342, bsc#970952).

Sat Mar 21 13:00:00 2015 p.drouandAATTgmail.com
- Fix build for openSUSE 13.1/SLE12

Sat Mar 14 13:00:00 2015 p.drouandAATTgmail.com
- Update to version 0.99.24.1

* zebra: don\'t print uninitialized string (3b02fe8)
This crept in as part of the MRIB improvements and I missed the compiler
warning between other noise. Unfortunately, printing an uninitialised
variable can in fact make zebra crash, so this is not trivial.
- Use systemd for openSUSE > 12.3
- Add patch from Fedora

* 0001-systemd-change-the-WantedBy-target.patch

Wed Jul 30 14:00:00 2014 sfalkenAATTopensuse.org
- Update to 0.99.23
See http://savannah.spinellicreations.com//quagga/quagga-0.99.23.changelog.txt
minor fixes:
bgpd: Fix condition allowas-in in rsclient code
support TTL-security with iBGP, factor out TTL setting
factor out eBGP multihop check
fix fast external fallover behavior
increase TCP socket buffer size
fix O_NONBLOCK on outgoing
send notify in OpenSent when stopping manually
display multipath status in \"show ip bgp\"
track correct originator-id in reflected routes
add \'bgp bestpath as-path multipath-relax\'
fix crash when allowas-in is done on inactive peer
efficient NLRI packing for AFs != ipv4-unicast
don\'t compare next-hop to router-id
use ATTR_FLAG_BIT() for BGP_ATTR_ values
fix some DEFUN definitions
bgpd-set-v4-nexthop-for-v6-peering.patch
support NEXTHOP_IPV4_IFINDEX in bgp import check
honor PEER_FLAG_DISABLE_CONNECTED_CHECK on bgp_scan
write NOTIFY non-blockingly
prevent double address delete on shutdown
stricter packet handling in OpenSent
fix lost passwords of grouped neighbors

* : nuke ^L (page feed)
isisd: ignore the unrecognized TLVs
ripd: fix \"show ip rip status\" documentation
avoid the zero interface metric
correctly redistribute ifindex routes (BZ#664)
zebra: raise the privileges before calling socket()
Change the mechanism for comparing route ID\'s.
fix some DEFUN definitions
apply syntactic sugar to rib_dump()
set metric for directly connected routes via netlink to 0
log routes w/o gateway in rib_delete_ipv4
match gateway when deleting NEXTHOP_IPV4_IFINDEX routes
make rib_dump() compatible with IPv6 RIB
apply route-maps for interface routes
fix recursive-routes via ifindex routes
implement NEXTHOP_FLAG_ONLINK
handle blackholes encountered in recursive resolution
rework recursive route resolution
improve interface shutdown behaviour
don\'t change connected state from zebra/interface.c
add ZEBRA_IFC_QUEUED to keep track of kernel state
warn if advertising connected with _REAL unset
consolidate connected_implicit_withdraw
clear ZEBRA_IFC_CONFIGURED on \"no ipv6 addr\"
make if_subnet_delete a bit more strict
process information about new addresses (BZ#486)`
support NEXTHOP_IPV4_IFINDEX in bgp import check
improve display of NEXTHOP_IPV4_IFINDEX in show ip route
don\'t printf to stdout on ZEBRA_IPV6_NEXTHOP_LOOKU
use SO_RCVBUFFORCE for netlink socket
ospfd: add debug messages for router lsa-generation
For an ABR, ensure the right LSID is MaxAge\'d
clarify indentation and comments in ospf_lsa_maxage_delete
fix a reference counting issue introduced by commit 4de8bf0011
check the LS-Ack\'s recentness instead of only comparing the #seq
don\'t allow to set network type on loopback interfaces
run DR election prior to LSA regeneration
ospfd/ospf_vty.c: use keyword cmd style
fix some DEFUN definitions
fixup log message in ospf_zebra_delete
refactor some common defines
protect vs. VU#229804 (malformed Router-LSA)
CVE-2013-2236, stack overrun in apiserver
fix flooding procedure
make ospf_maxage_lsa_remover actually yield
restore nexthop IP for p2p interfaces
fix LSA initialization for build without opaque LSA
lib: use heap to manage timers
remove unused thread_master_debug function
lib/command.c: rewrite command matching/parsing
fix possible off-by-one in stream_put_prefix()
fix for dynamically grown hashes
fix backtraces broken by 837d16c...
unconditionally include stddef.h
register vtysh socket in server socket vector (BZ#754)
ospf6d: fix refcounting in ospf6_asbr_lsa_remove
add \"auto-cost reference-bandwidth\" command
compute interface cost from its bandwidth
solve segfaults with ospf6d on FreeBSD
Merge volatile/cumulus_ospf6d
fix interface_down() stopping hellos
clear lsa->refresh before clearing LSAs
handle missing link local address more gracefully
improve ordered shutdown
clear DR info on interface_down
set cmsg size correctly
don\'t run DR election early on \"ipv6 ospf6 priority\"
fix integrated config
add SPF logs, statistics, and display of SPF parameters
add \'log-adjacency-changes [detail]\'
don\'t send LSAck on an interface if we\'ve flooded the LSU out that i/f
handle Prefix and Router Options bits correctly
add LSA payload to show summary output
increment dbdesc seqnum on SeqNumberMismatch/BadLsReq event
don\'t change SeqNum on initial DbDesc message
handle seqnum wrapping
add overload support
fix linkdown handling
correct nexthop through directly connected networks
don\'t suppress empty router LSA
turn off expensive debugging
convert LSDB to use route_node, improve performance
fix neighbor state machine (faster lsdb sync, RFC compliance)
add p2p interface support
fix various bugs in installing and flooding LSAs
add more details to show ipv6 ospf6 data
enable the commands to support detailed debugging of LSAs.
remove older version of LSA from neigbor retx list before prematurely aging it.
schedule SPF to run on events rather than directly on each event.
refactor some common defines
security: Fix some typos and potential NULL-deref
tests: Add tests for timers
add a test program for lib/command.c
DejaGNU libzebra bgpd
add DejaGNU framework
vtysh: don\'t append superflous spaces (BZ#750)
fix false lib path matching in extract.pl.in
doc: Modernize INSTALL.quagga.txt.
update TODO for ospf6d work & bgp multipath
add OSPFv3 homenet to TODO
hash: dynamically grow hash table
force size to be a power of 2
guile: remove
build issues:
lib: remove redundant and incorrect sys/fcntl.h include
vtysh: fix build against readline 6.3
tests: fix build & disable testcommands
don\'t build tests unless make check is run
fix Makefile.am so it works with BSD make
make --disable-bgpd kill bgpd tests too
build: remove now-useless --{en, dis}able-tests
improve backtrace support/detection
reference libcap from libzebra (BZ#393,626)
fix minimal mixup in gitinfo suffix
Update supported versions.
update quagga.spec.in
isisd: use bug-report information from autoconf
ospf6d: use bug-report information from autoconf
doc: fix makeinfo errors and one warning

Wed Jul 30 14:00:00 2014 sfalkenAATTopensuse.org
- Updated to 0.99.23
Changed /var/run to /run in .spec file in order to fix rpmlint check failure in Factory
Added:
quagga-0.99.23.tar.xz
quagga-0.99.23.tar.asc
Deleted:
quagga-0.99.22.1.tar.gz
quagga-0.99.22.1.tar.asc

Wed Jul 17 14:00:00 2013 meissnerAATTsuse.com
- fixed source url, added tar.asc and keyring url (unchecked)

Wed Jul 17 14:00:00 2013 boyangAATTsuse.com
- Add return value for table_test.c.

Fri Apr 19 14:00:00 2013 boyangAATTsuse.com
- Update to 0.99.22.1
major regressions:
ospfd: restore nexthop IP for p2p interfaces
minor fixes:
bgpd: fix lost passwords of grouped neighbors
lib/vty: register vtysh socket in server socket vector (BZ#754)
ospfd: fix LSA initialization for build without opaque LSA
ripd: correctly redistribute ifindex routes (BZ#664)
build issues:
build: fix minimal mixup in gitinfo suffix
build: reference libcap from libzebra (BZ#393,626)
build: update quagga.spec.in
doc: fix makeinfo errors and one warning
tests: make --disable-bgpd kill bgpd tests too
vtysh: fix false lib path matching in extract.pl.in

Wed Sep 12 14:00:00 2012 cooloAATTsuse.com
- add makeinfo as explicit buildrequire

Thu Aug 9 14:00:00 2012 mrueckertAATTsuse.de
- Update to 0.99.21
There are some major user-visible changes:
[bgpd] BGP multipath support has been merged
[bgpd] SAFI (Multicast topology) support has been extended to
propagate the topology to zebra.
[bgpd] AS path limit functionality has been removed
[babeld] a new routing daemon implementing the BABEL ad-hoc mesh
routing protocol has been merged.
[isisd] a major overhaul has been picked up. Please note that
isisd is STILL NOT SUITABLE FOR PRODUCTION USE.
[
*] a lot of bugs have been fixed, please refer to the git log
The number of bugfixes and changes in this release is quite large
at 446 commits, though some commits are counted twice due to a
merge of Denis
Ovsienko\'s RE branch some time ago. (Previous releases had around
50 commits each.)
- additional changes from 0.99.20.1
This is a security-fix release that addresses 3 pending CVEs, one
in bgpd and two in ospfd. The CVEs will be linked once released.
- added quagga-0.99.21_isis_undefined_operations.patch:
fix compiler warning about undefined operations
- a47c5838e9f445ab887ad927706b11ccbb181364.patch
Fix typo in isis topology code. Taken from git.
- drop quagga-0.99.20-fix-bgpd-attr-memleak.patch:
Included upstream
- added options to build tcp-zebra, irdp and pcre:
all enabled by default
pcre change might cause problems in edge cases with bgp
new buildrequires: pcre-devel
- added option to build with isis and isis-topology:
disabled by default

Tue Dec 6 13:00:00 2011 oliproAATT8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa
- Update package to quagga-0.99.20, remove stale patches.
added upstream patch to resolve a bgpd memleak

Wed Nov 23 13:00:00 2011 cooloAATTsuse.com
- add libtool as buildrequire to avoid implicit dependency

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- DoS while decoding EXTENDED_COMMUNITIES in Quagga\'s BGP
[bnc#718062]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPFD DoS while decoding Link State Update [bnc#718061]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPFD DoS while decoding Hello packet [bnc#718059]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPF6D DoS while decoding Database Description packet
[bnc#718058]

Mon Sep 19 14:00:00 2011 boyangAATTsuse.com
- OSPF6D buffer overflow while decoding Link State Update with
Inter Area Prefix Lsa [bnc#718056]

Thu Jun 2 14:00:00 2011 boyangAATTnovell.com
- Fix bnc#680499, zebro and ripd won\'t start [bnc#680499]

Wed Feb 23 13:00:00 2011 prusnakAATTopensuse.org
- fix CVE-2010-1674 and CVE-2010-1675 [bnc#654270]

Tue Nov 9 13:00:00 2010 prusnakAATTopensuse.org
- mark /var/run/quagga as ghost, create it in initscript
[Fate#303793]

Tue Nov 9 13:00:00 2010 prusnakAATTopensuse.org
- updated to 0.99.17 - fixes [bnc#634300]
bgpd:
fix handling of AS path data
tighten bounds checking in RR ORF msg reader
ospfd:
Only refresh external default route once.
Make sure ospf_distribute_list_update_timer() eventually runs.
Make sure all external routes are updated.
zebra:
fix infinite loop when deleting an interface
ospf6d:
Fix crash when \'[no] ipv6 ospf6 advertise prefix-list\' is in startup-config
isisd:
change ISIS_METHOD to use C preprocessor
other:
build: ignore mkinstalldirs and texinfo.tex
build: Add QuaggaId to README.NetBSD
build/extra: Enhance README.NetBSD make/gmake decision.
git: add pointers to out-of-tree work
git: add (generated) m4 files to .gitignore
Update for git and emphasize asking for good reports.
doc: fixed spelling in bgpd.texi

Tue Nov 9 13:00:00 2010 prusnakAATTopensuse.org
- updated to 0.99.16
bgpd:
use monotonic clock for time of day
code cleanup
compile warnings cleanup
work around warning in assegments_parse()
ospfd:
fix debug messages that were masked by DISCARD_LSA
remove unneeded memset from a very hot function
VTY strings cleanup
comment out unused function
make local functions static
enable more OSPF cost command aliases
lib:
fix memory logging
make some structures constant
move check_bit into prefix common code
fix warning on little endian
make match functions take const args
remove unused function: route_dump_node()
log source of vty connections (bug #566)
zebra:
change router-id selection algo
deal with irdp compile warnings
cleanup RIB meta queue code
fix more warnings in rtadv
fix more compiler warnings
remove unused function to fix warning
handle RTF_CLONING removal from FreeBSD 8.0
fix argument reference in strncpy() call for BSD
fix RIB debug message for IPv6
make declaration const in rtm_flag_dump()
fix router advertisements for non-Ethernet link layer addresses
ospf6d:
remove dead code
fix warnings from recent prefix bit commit
review LSA sequence number comparison
fix LSA locking in ospf6_new_ls_id()
other:
ripd: fix compiler warnings
ripngd: compiler warnings cleanup
isisd: fix --enable-isis-topology for 64-bit Linux
isisd: fix BPF ioctl() calls, treat \"true\" and \"false\" as reserved
configure: fix spelling
configure: fix HAVE_CLOCK_MONOTONIC spelling

Thu Dec 3 13:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.15

* bgpd:
fix md5 set on listen sockets
missing pieces from listener patch
Workaround for invalid MBGP next hop
Allow inbound connections to non-default view
fd leak in bgpd
Delete AS_CONFED_SEQUENCE when prepending an AS_SEQUENCE type segment
Implement BGP confederation error handling (RFC5065, Par. 5)
start listener on first instance
peer action table static/const
Restore ability of \'neighbor ... update-source\' to take interface name

* ospfd:
Make sure priority is respected.
Tighten up the connected check for redistribution
fix performance problem with redistribute delete
Make sure route table is recalculated.
Make \"Packet ... received on wrong link\" conditional on debug
Change struct ospf_path
*oi to ifindex.
Discriminate better when selecting links between vertices in SPF
Make ospf_if_lookup_recv_if() find the right unnumbered i/f
export ospf_if_table_lookup() and use it in ospf_network_run_interface()

* ospf6d:
bug #529, fix endianness problem in earlier commit

* ripd:
set IP TOS for control socket

* zebra:
do not touch socket before pidfile locking

* doc:
zebra.8 via Christian Hammers (#531)

Wed Aug 5 14:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.14

* lib:
Fix IPv6 normalisation
Allow for large-file support, e.g. for log files >2GB

* zebra:
Silence noisy process_subq
RFC 4191 Default Router Preference support for router advertisements
linux policy routing support with ipv6
Static route does not reach kernel.

* bgpd:
Fix nexthop reachability check on confederations
fix typo made by paul in previous commit
Avoid zombie accepted peer entries
Small buffer overrun in bgp_clear_node_queue_init
Stability fixes including bugs 397, 492
Fix compiler warnings related to MD5
Bug #533: Fix crash with copy/pasted commands, inc \'no bgp ...\'
Log a debug/update warning if filters are configured but don\'t exist
Add \'show ip bgp view WORD neighbors IP (advertised|received)-routes\'
review 32-bit AS-path hotfix for 0.99.12
Fix \"show ip bgp dampened-paths\" garbage output.
Fixes to RFC2385/MD5 BGP

* ospfd:
Do not use stale Network/Router LSAs
compare ifIndex too when matching paths
external LSA route_unlock_node() fixes
Fix a few LSA performance \"bugs\"
discount IP header size from a new LSA pkt
cancel OSPF timer hack in nsm_change_state

* ospf6d:
Fix regression in monotonic time patch - LSA max-aging broke

* vtysh:
Save vtysh history to a file
Fix vtysh based \"write term\" output.

* doc:
Add \"--disable-doc\" to configure

Wed Jul 15 14:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.13

* build:
[configure] fix check for GNU awk/gawk to abort ./configure if missing
[configure] add configure support for PCRE Posix library
[configure] Detect support for monotonic clock

* zebra:
[zebra] Force rib_update when connected route deleted
[zebra] Only announce connected routes if link is detected
[zebra] MTU is unsigned
[zebra] remove incorrect debug message
[zebra] Cleanup meta-queue code
[zebra] netlink interface minor cleanup
[zebra] Fix vyatta bug 2814: Add \"show ip route summary\" command.

* bgpd:
[bgpd] Fix \'update-source\' command: It doesn\'t accept interface names
[bgpd] reference count the BGP instance
[bgpd] Add support for the old Linux 2.4, TCP_MD5_AUTH RFC2385 patch
[bgpd] Fixed as-path prepend/exclude ASN handling
[bgp] Fix crash on SIGHUP, deref of freed workqueues
[bgpd] 64-bit bugfix in community_del_val

* ospfd:
[ospfd] Fix OSPF route refcount leak
[ospfd] fix vty ospfd no ospf abr-type standard

* ospf6d:
Convert ospf6d over to quagga_gettime() wrappers.
[ospf6d] Remove \'no router\' from OSPF6_NODE
[ospf6d] Fix ospf6d crash if removing interface with no area
[ospf6d] Fix ospf6d crash in show border routers
[ospf6] Add no router ospf6
[ospf6d] Fix ospf6d crash if range defined twice

* ripd:
[ripd] Ignore non-running interfaces in rip status
[ripd] Fix metrix in call to rip_zebra_ipv4_delete

* vtysh:
[vtysh] Add a --noerror option
[vtysh] Return non-zero exit code on error.
[vtysh] Make vtysh more useable for scripting
[vtysh] Force line buffered mode.

* misc:
[daemons/cleanup] Remove disabled log_mode argument support.
[lib] Put symbolic backtrace on system log
[lib] sockopt_tcp_signature: sin6 requires HAVE_IPV6
[smux] 64-bit fix for lib/smux.h SNMP_INTEGER() macro

Wed May 13 14:00:00 2009 prusnakAATTsuse.cz
- updated to 0.99.12

* bgpd:
Fix bgp ipv4/ipv6 accept handling
[bgpd] AS4 bugfix by Chris Caputo
[bgpd] Add \'show bgp views\' command
[bgpd] Allow accepted peers to progress even if realpeer is in Connect

* ospfd:
[lib] Move type cast in Fletcher checksum
[lib] Switch Fletcher checksum back to old ospfd version
Justified OSPF cost function names and added support for:
ospf cost <1-65535> A.B.C.D
no ospf cost <1-65535>

* library:
[lib] Fix timer precision.
[lib] fix missing sockunion_normalise_mapped

* vtysh:
[vtysh] Add commands from zebra_routemap.c to vtysh

* misc:
[build] tools/multiple-bgpd.sh should be in \'make dist\'
- added logrotate to Recommends
- removed obsoleted patches:

* bgpd-asn-dos.patch (mainline)

Thu May 7 14:00:00 2009 prusnakAATTsuse.cz
- fixed crash (DoS) in BGP daemon via an ASN elements
(bgpd-asn-dos.patch) [bnc#500540]