]> git.proxmox.com Git - mirror_frr.git/blob - debian/changelog
*: Add camelCase JSON keys in addition to PascalCase
[mirror_frr.git] / debian / changelog
1 frr (8.2~dev-1) UNRELEASED; urgency=medium
2
3 * New upstream release...
4
5 -- Jafar Al-Gharaibeh <jafar@atcorp.com> Mon, 08 Nov 2021 10:00:00 +0500
6
7 frr (8.1-0) unstable; urgency=medium
8
9 * New upstream release FRR 8.1
10
11 -- Jafar Al-Gharaibeh <jafar@atcorp.com> Tue, 02 Nov 2021 14:00:00 +0500
12
13 frr (8.0-0) unstable; urgency=medium
14
15 * New upstream release FRR 8.0
16
17 -- Martin Winter <mwinter@opensourcerouting.org> Wed, 21 Jul 2021 13:42:00 +0200
18
19 frr (7.5.1-1) unstable; urgency=medium
20
21 * Update the d/gbp.conf for 7.5.1 release
22 * Use wrap-and-sort -a to unify debian/ wrapping and sorting
23 * Work around the sphinx-build error that doesn't copy images to texinfo
24 * Change the upstream-tag in d/gbp.conf to track the upstream tarballs
25
26 -- Ondřej Surý <ondrej@debian.org> Mon, 08 Mar 2021 09:40:19 +0100
27
28 frr (7.5-1) unstable; urgency=medium
29
30 * New upstream version 7.5
31
32 -- Ondřej Surý <ondrej@debian.org> Sun, 14 Feb 2021 21:38:50 +0100
33
34 frr (7.4-2) unstable; urgency=medium
35
36 * Bump libyang dependency to >= 1.0.184-1~
37 * Make the autopkgtest more resilient (Closes: #980111)
38 * Adjust the ax_python.m4 to hardcode python3.9
39
40 -- Ondřej Surý <ondrej@debian.org> Sun, 07 Feb 2021 13:15:07 +0100
41
42 frr (7.4-1.1) unstable; urgency=medium
43
44 * Non-maintainer upload.
45 * Backport upstream fix for FTBFS with Python 3.9. (Closes: #972767)
46
47 -- Adrian Bunk <bunk@debian.org> Thu, 21 Jan 2021 16:06:12 +0200
48
49 frr (7.4-1) unstable; urgency=medium
50
51 [ Ondřej Surý ]
52 * Use dh_installinit capabilities to install frr.tmpfile
53 * Remove unused debian/watchfrr.rc file
54 * Add missing lsof dependency
55 * Remove mention of pkg.frr.snmp build profile from debian/README.Debian
56 * Make lsb-base a hard dependency
57 * Update gbp.conf for 7.4 release
58 * Update and simplify d/watch
59 * Change the debian source format from 3.0 (git) to 3.0 (quilt)
60 * Convert the package to dh compat level 10
61 * Add myself to Uploaders
62 * Bump standards version to 4.5.0.2 (latest) - no change
63 * Use wrap-and-sort -a to unify debian/ wrapping and sorting
64 * Work around the sphinx-build error that doesn't copy images to texinfo
65 (Properly closes: #955067)
66 * Depend on debhelper >= 9.20160709 and drop dh-systemd dependency
67 (Closes: #958626)
68
69 -- Ondřej Surý <ondrej@debian.org> Mon, 10 Aug 2020 11:50:45 +0200
70
71 frr (7.3.1-1) unstable; urgency=medium
72
73 [ David Lamparter ]
74 * allow cross-compile with sbuild --host
75
76 [ Ondřej Surý ]
77 * Add myself to Uploaders
78 * Add d/gbp.conf
79 * Update changelog for 7.3.1-1~1.gbp2292a4 release
80 * Change the source format from git to quilt to use git-buildpackage
81 * Don't install frr-doc texinfo images, they are gone (Closes: #955067)
82 * Bump the dh_compat to 10
83
84 -- Ondřej Surý <ondrej@debian.org> Mon, 01 Jun 2020 08:41:03 +0200
85
86 frr (7.3-1) unstable; urgency=medium
87
88 * new upstream release
89
90 -- David Lamparter <equinox-debian@diac24.net> Tue, 25 Feb 2020 17:45:16 +0100
91
92 frr (7.2.1-1) unstable; urgency=medium
93
94 * new upstream release
95 * daemon man pages renamed to frr-* (closes: #944392)
96 * fix/improve multi-arch markers on doc
97 * fix git URLs to point to debian branch
98
99 -- David Lamparter <equinox-debian@diac24.net> Mon, 20 Jan 2020 17:06:21 +0100
100
101 frr (7.2-1) unstable; urgency=medium
102
103 * New upstream release
104
105 -- Jafar Al-Gharaibeh <jafar@atcorp.com> Sun, 03 Nov 2019 18:45:23 +0100
106
107 frr (6.0.2-2) unstable; urgency=medium
108
109 * remove bogus libjson0 build-dep (closes: #921349)
110 * fix broken systemd dependency spec
111 * add proper Conflicts: for quagga and pimd (closes: #921376)
112
113 -- David Lamparter <equinox-debian@diac24.net> Mon, 04 Feb 2019 22:16:07 +0100
114
115 frr (6.0.2-1) unstable; urgency=medium
116
117 * Packaging has been more or less completely reworked, based off the old
118 Quagga packaging that hung around in git. Refer to "changelog-auto.in"
119 in the source root directory for the old changelog.
120 * Initial release of FRR for Debian. (closes: #863249)
121
122 -- David Lamparter <equinox-debian@diac24.net> Sun, 27 Jan 2019 17:27:02 +0100
123
124 frr (6.0-2) testing; urgency=medium
125
126 * add install-info to build deps
127 * remove trailing whitespace from control
128 * cleanup tcp-zebra configure options
129 * drop unused SMUX client OID MIBs
130 * remove /proc check
131 * remove --enable-poll
132 * remove libtool .la files
133 * drop texlive-latex-base, texlive-generic-recommended build deps
134 * consistently allow python2 or python3
135 * remove bad USE_* options, add WERROR
136 * drop libncurses5 dep
137 * remove backports mechanism
138 * use better dependency for pythontools (binNMU compatible)
139 * remove bogus shlib:Depends on frr-dbg
140 * create frr-snmp and frr-rpki-rtrlib
141 * make frr-pythontools a "Recommends:"
142 * use redistclean target
143 * update to Debian Policy version 4.2.1
144 * raise debhelper compat level to 9
145 * ditch development-only files
146 * modernise dh_missing and use fail mode
147 * disable zeromq and FPM
148 * always install /etc/init.d/frr
149 * put frr-doc package in 'doc' section
150 * install HTML docs, drop tools/
151 * fix install for {frr,rfptest,ospfclient}
152 * add watch file
153 * change python dependency and shebang to python3:any
154 * use set -e in maintscripts
155 * put myself in as maintainer
156 * update copyright file
157 * closes: #863249
158
159 -- David Lamparter <equinox-debian@diac24.net> Thu, 25 Oct 2018 16:36:50 +0200
160
161 frr (6.0-1) RELEASED; urgency=medium
162
163 * New Enabled: PIM draft Unnumbered
164
165 -- FRRouting-Dev <dev@lists.frrouting.org> Wed, 18 Oct 2017 17:01:42 -0700
166
167 frr (3.0-1) RELEASED; urgency=medium
168
169 * Added Debian 9 Backport
170
171 -- FRRouting-Dev <dev@lists.frrouting.org> Mon, 16 Oct 2017 03:28:00 -0700
172
173 frr (3.0-0) RELEASED; urgency=medium
174
175 * New Enabled: BGP Shutdown Message
176 * New Enabled: BGP Large Community
177 * New Enabled: BGP RFC 7432 Partial Support w/ Ethernet VPN
178 * New Enabled: BGP EVPN RT-5
179 * New Enabled: LDP RFC 5561
180 * New Enabled: LDP RFC 5918
181 * New Enabled: LDP RFC 5919
182 * New Enabled: LDP RFC 6667
183 * New Enabled: LDP RFC 7473
184 * New Enabled: OSPF RFC 4552
185 * New Enabled: ISIS SPF Backoff draft
186 * New Enabled: PIM Unnumbered Interfaces
187 * New Enabled: PIM RFC 4611
188 * New Enabled: PIM Sparse Mode
189 * New Enabled: NHRP RFC 2332
190 * New Enabled: Label Manager
191 * Switched from hardening-wrapper to dpkg-buildflags.
192
193 -- FRRouting-Dev <dev@lists.frrouting.org> Fri, 13 Oct 2017 16:17:26 -0700
194
195 frr (2.0-0) RELEASED; urgency=medium
196
197 * Switchover to FRR
198
199 -- FRRouting-Dev <dev@lists.frrouting.org> Mon, 23 Jan 2017 16:30:22 -0400
200
201 quagga (0.99.24+cl3u5) RELEASED; urgency=medium
202
203 * Closes: CM-12846 - Resolve Memory leaks in 'show ip bgp neighbor json'
204 * Closes: CM-5878 - Display all ospf peers with 'show ip ospf neighbor detail all'
205 * Closes: CM-5794 - Add support for IPv6 static to null0
206 * Closes: CM-13060 - Reduce JSON memory usage.
207 * Closes: CM-10394 - protect 'could not get instance' error messages with debug
208 * Closes: CM-11173 - Move netlink error messages undeer a debug
209 * Closes: CM-13328 - Fixes route missing in hardware after reboot
210
211 -- dev-support <dev-support@cumulusnetworks.com> Fri, 11 Nov 2016 22:13:29 -0400
212
213 quagga (0.99.24+cl3u4) RELEASED; urgency=medium
214
215 * Closes: CM-12687 - Buffer overflow in zebra RA code
216
217 -- dev-support <dev-support@cumulusnetworks.com> Wed, 31 Aug 2016 12:36:10 -0400
218
219 quagga (0.99.24+cl3u3) RELEASED; urgency=medium
220
221 * New Enabled: Merge up-to 0.99.24 code from upstream
222 * New Enabled: Additional CLI simplification
223 * New Enabled: Various Bug Fixes
224
225 -- dev-support <dev-support@cumulusnetworks.com> Thu, 04 Aug 2016 08:43:36 -0700
226
227 quagga (0.99.23.1-1+cl3u2) RELEASED; urgency=medium
228
229 * New Enabled: VRF - See Documentation for how to use
230 * New Enabled: Improved interface statistics
231 * New Enabled: Various vtysh improvements
232 * New Enabled: Numerous compile warnings and SA fixes
233 * New Enabled: Improved priviledge handlingA
234 * New Enabled: Various OSPF CLI fixes
235 * New Enabled: Prefix-list Performance Improvements.
236 * New Enabled: Allow more than 1k peers in Quagga
237 and Performance Improvements
238 * New Enabled: Systemd integration
239 * New Enabled: Various ISIS fixes
240 * New Enabled: BGP MRT improvements
241 * New Enabled: Lowered default MRAI timers
242 * New Enabled: Lowered default 'timers connect'
243 * New Enabled: 'bgp log-neighbor-changes' enabled by default
244 * New Enabled: BGP default keepalive to 3s and holdtime to 9s
245 * New Enabled: OSPF spf timers are now '0 50 5000' by default
246 * New Enabled: BGP hostname is displayed by default
247 * New Enabled: BGP 'no-as-set' is the default for
248 'bgp as-path multipath-relax"
249 * New Enabled: RA is on by default if using 5549 on an interface
250 * New Enabled: peer-group restrictions relaxed, update-groups determine
251 outbund policy anyway
252 * New Enabled: BGP enabled 'maximum-paths 64' by default
253 * New Enabled: OSPF "log-adjacency-changes" on by default
254 * New Enabled: Zebra: Add IPv6 protocol filtering support
255 * and setting src of IPv6 routes.
256 * New Enabled: BGP and OSPF JSON commands added.
257 * New Enabled: BGP Enable multiple instances support by default
258 * New Enabled: 'banner motd file' command
259 * New Enabled: Remove bad default passwords from default conf
260 * New Enabled: BGP addpath TX
261 * New Enabled: Simplified configuration for BGP Unnumbered
262
263 * New Deprecated: Remove unused 'show memory XXX' functionality
264 * New Deprecated: Remove babel protocol
265
266 * Closes: CM-10435 Addition on hidden command
267 "bfd multihop/singlehop" and "ptm-enable" per interface command
268 * Closes: CM-9974 Get route counts right for show ip route summary
269 * Closes: CM-9786 BGP memory leak in peer hostname
270 * Closes: CM-9340 BGP: Ensure correct sequence of processing at exit
271 * Closes: CM-9270 ripd: Fix crash when a default route is passed to rip
272 * Closes: CM-9255 BGPD crash around bgp_config_write ()
273 * Closes: CM-9134 ospf6d: Fix for crash when non area 0 network
274 entered first
275 * Closes: CM-8934 OSPFv3: Check area before scheduling SPF
276 * Closes: CM-8514 zebra: Crash upon disabling a link
277 * Closes: CM-8295 BGP crash in group_announce_route_walkcb
278 * Closes: CM-8191 BGP: crash in update_subgroup_merge()
279 * Closes: CM-8015 lib: Memory reporting fails over 2GB
280 * Closes: CM-7926 BGP: crash from not NULLing freed pointers
281
282 -- dev-support <dev-support@cumulusnetworks.com> Wed, 04 May 2016 16:22:52 -0700
283
284 quagga (0.99.23.1-1) unstable; urgency=medium
285
286 * New upstream release
287 * Added .png figures for info files to quagga-doc package.
288 * Changed dependency from iproute to iproute2 (thanks to Andreas
289 Henriksson). Closes: #753736
290 * Added texlive-fonts-recommended to build-depends to get ecrm1095 font
291 (thanks to Christoph Biedl). Closes: #651545
292
293 -- Christian Brunotte <ch@debian.org> Tue, 30 Sep 2014 00:20:12 +0200
294
295 quagga (0.99.23-1) unstable; urgency=low
296
297 * New upstream release
298 * Removed debian/patches/readline-6.3.diff which was already in upstream.
299
300 -- Christian Hammers <ch@debian.org> Tue, 08 Jul 2014 09:15:48 +0200
301
302 quagga (0.99.22.4-4) unstable; urgency=medium
303
304 * Fix build failure with readline-6.3 (thanks to Matthias Klose).
305 Closes: #741774
306
307 -- Christian Hammers <ch@debian.org> Sun, 23 Mar 2014 15:28:42 +0100
308
309 quagga (0.99.22.4-3) unstable; urgency=low
310
311 * Added status to init script (thanks to Peter J. Holzer). Closes: #730625
312 * Init script now sources /lib/lsb/init-functions.
313 * Switched from hardening-wrapper to dpkg-buildflags.
314
315 -- Christian Hammers <ch@debian.org> Wed, 01 Jan 2014 19:12:01 +0100
316
317 quagga (0.99.22.4-2) unstable; urgency=low
318
319 * Fixed typo in package description (thanks to Davide Prina).
320 Closes: #625860
321 * Added Italian Debconf translation (thanks to Beatrice Torracca)
322 Closes: #729798
323
324 -- Christian Hammers <ch@debian.org> Tue, 26 Nov 2013 00:47:11 +0100
325
326 quagga (0.99.22.4-1) unstable; urgency=high
327
328 * SECURITY:
329 "ospfd: CVE-2013-2236, stack overrun in apiserver
330
331 the OSPF API-server (exporting the LSDB and allowing announcement of
332 Opaque-LSAs) writes past the end of fixed on-stack buffers. This leads
333 to an exploitable stack overflow.
334
335 For this condition to occur, the following two conditions must be true:
336 - Quagga is configured with --enable-opaque-lsa
337 - ospfd is started with the "-a" command line option
338
339 If either of these does not hold, the relevant code is not executed and
340 the issue does not get triggered."
341 Closes: #726724
342
343 * New upstream release
344 - ospfd: protect vs. VU#229804 (malformed Router-LSA)
345 (Quagga is said to be non-vulnerable but still adds some protection)
346
347 -- Christian Hammers <ch@debian.org> Thu, 24 Oct 2013 22:58:37 +0200
348
349 quagga (0.99.22.1-2) unstable; urgency=low
350
351 * Added autopkgtests (thanks to Yolanda Robla). Closes: #710147
352 * Added "status" command to init script (thanks to James Andrewartha).
353 Closes: #690013
354 * Added "libsnmp-dev" to Build-Deps. There not needed for the official
355 builds but for people who compile Quagga themselves to activate the
356 SNMP feature (which for licence reasons cannot be done by Debian).
357 Thanks to Ben Winslow). Closes: #694852
358 * Changed watchquagga_options to an array so that quotes can finally
359 be used as expected. Closes: #681088
360 * Fixed bug that prevented restarting only the watchquagga daemon
361 (thanks to Harald Kappe). Closes: #687124
362
363 -- Christian Hammers <ch@debian.org> Sat, 27 Jul 2013 16:06:25 +0200
364
365 quagga (0.99.22.1-1) unstable; urgency=low
366
367 * New upstream release
368 - ospfd restore nexthop IP for p2p interfaces
369 - ospfd: fix LSA initialization for build without opaque LSA
370 - ripd: correctly redistribute ifindex routes (BZ#664)
371 - bgpd: fix lost passwords of grouped neighbors
372 * Removed 91_ld_as_needed.diff as it was found in the upstream source.
373
374 -- Christian Hammers <ch@debian.org> Mon, 22 Apr 2013 22:21:20 +0200
375
376 quagga (0.99.22-1) unstable; urgency=low
377
378 * New upstream release.
379 - [bgpd] The semantics of default-originate route-map have changed.
380 The route-map is now used to advertise the default route conditionally.
381 The old behaviour which allowed to set attributes on the originated
382 default route is no longer supported.
383 - [bgpd] this version of bgpd implements draft-idr-error-handling. This was
384 added in 0.99.21 and may not be desirable. If you need a version
385 without this behaviour, please use 0.99.20.1. There will be a
386 runtime configuration switch for this in future versions.
387 - [isisd] is in "beta" state.
388 - [ospf6d] is in "alpha/experimental" state
389 - More changes are documented in the upstream changelog!
390 * debian/watch: Adjusted to new savannah.gnu.org site, thanks to Bart
391 Martens.
392 * debian/patches/99_CVE-2012-1820_bgp_capability_orf.diff removed as its
393 in the changelog.
394 * debian/patches/99_distribute_list.diff removed as its in the changelog.
395 * debian/patches/10_doc__Makefiles__makeinfo-force.diff removed as it
396 was just for Debian woody.
397
398 -- Christian Hammers <ch@debian.org> Thu, 14 Feb 2013 00:22:00 +0100
399
400 quagga (0.99.21-4) unstable; urgency=medium
401
402 * Fixed regression bug that caused OSPF "distribute-list" statements to be
403 silently ignored. The patch has already been applied upstream but there
404 has been no new Quagga release since then.
405 Thanks to Hans van Kranenburg for reporting. Closes: #697240
406
407 -- Christian Hammers <ch@debian.org> Sun, 06 Jan 2013 15:50:32 +0100
408
409 quagga (0.99.21-3) unstable; urgency=high
410
411 * SECURITY:
412 CVE-2012-1820 - Quagga contained a bug in BGP OPEN message handling.
413 A denial-of-service condition could be caused by an attacker controlling
414 one of the pre-configured BGP peers. In most cases this means, that the
415 attack must be originated from an adjacent network. Closes: #676510
416
417 -- Christian Hammers <ch@debian.org> Fri, 08 Jun 2012 01:15:32 +0200
418
419 quagga (0.99.21-2) unstable; urgency=low
420
421 * Renamed babeld.8 to quagga-babeld.8 as it conflicted with the
422 original mapage of the babeld package which users might want to
423 install in parallel as it is slightly more capable. Closes: #671916
424
425 -- Christian Hammers <ch@debian.org> Thu, 10 May 2012 07:53:01 +0200
426
427 quagga (0.99.21-1) unstable; urgency=low
428
429 * New upstream release
430 - [bgpd] BGP multipath support has been merged
431 - [bgpd] SAFI (Multicast topology) support has been extended to propagate
432 the topology to zebra.
433 - [bgpd] AS path limit functionality has been removed
434 - [babeld] a new routing daemon implementing the BABEL ad-hoc mesh routing
435 protocol has been merged.
436 - [isisd] a major overhaul has been picked up. Please note that isisd is
437 STILL NOT SUITABLE FOR PRODUCTION USE.
438 - a lot of bugs have been fixed
439 * Added watchquagga daemon.
440 * Added DEP-3 conforming patch comments.
441
442 -- Christian Hammers <ch@debian.org> Sun, 06 May 2012 15:33:33 +0200
443
444 quagga (0.99.20.1-1) unstable; urgency=high
445
446 * SECURITY:
447 CVE-2012-0249 - Quagga ospfd DoS on malformed LS-Update packet
448 CVE-2012-0250 - Quagga ospfd DoS on malformed Network-LSA data
449 CVE-2012-0255 - Quagga bgpd DoS on malformed OPEN message
450 * New upstream release. Closes: #664033
451
452 -- Christian Hammers <ch@debian.org> Fri, 16 Mar 2012 22:14:05 +0100
453
454 quagga (0.99.20-4) unstable; urgency=low
455
456 * Switch to dpkg-source 3.0 (quilt) format.
457 * Switch to changelog-format-1.0.
458
459 -- Christian Hammers <ch@debian.org> Sat, 25 Feb 2012 18:52:06 +0100
460
461 quagga (0.99.20-3) unstable; urgency=low
462
463 * Added --sysconfdir back to the configure options (thanks to Sven-Haegar
464 Koch). Closes: #645649
465
466 -- Christian Hammers <ch@debian.org> Tue, 18 Oct 2011 00:24:37 +0200
467
468 quagga (0.99.20-2) unstable; urgency=low
469
470 * Bumped standards version to 0.9.2.
471 * Migrated to "dh" build system.
472 * Added quagga-dbg package.
473
474 -- Christian Hammers <ch@debian.org> Fri, 14 Oct 2011 23:59:26 +0200
475
476 quagga (0.99.20-1) unstable; urgency=low
477
478 * New upstream release:
479 "The primary focus of this release is a fix of SEGV regression in ospfd,
480 which was introduced in 0.99.19. It also features a series of minor
481 improvements, including better RFC compliance in bgpd, better support
482 of FreeBSD and some enhancements to isisd."
483 * Fixes off-by-one bug (removed 20_ospf6_area_argv.dpatch). Closes: #519488
484
485 -- Christian Hammers <ch@debian.org> Fri, 30 Sep 2011 00:59:24 +0200
486
487 quagga (0.99.19-1) unstable; urgency=high
488
489 * SECURITY:
490 "This release provides security fixes, which address assorted
491 vulnerabilities in bgpd, ospfd and ospf6d (CVE-2011-3323,
492 CVE-2011-3324, CVE-2011-3325, CVE-2011-3326 and CVE-2011-3327).
493 * New upstream release.
494 * Removed incorporated debian/patches/92_opaque_lsa_enable.dpatch.
495 * Removed incorporated debian/patches/93_opaque_lsa_fix.dpatch.
496 * Removed obsolete debian/README.Debian.Woody and README.Debian.MD5.
497
498 -- Christian Hammers <ch@debian.org> Tue, 27 Sep 2011 00:16:27 +0200
499
500 quagga (0.99.18-1) unstable; urgency=low
501
502 * SECURITY:
503 "This release fixes 2 denial of services in bgpd, which can be remotely
504 triggered by malformed AS-Pathlimit or Extended-Community attributes.
505 These issues have been assigned CVE-2010-1674 and CVE-2010-1675.
506 Support for AS-Pathlimit has been removed with this release."
507 * Added Brazilian Portuguese debconf translation. Closes: #617735
508 * Changed section for quagga-doc from "doc" to "net".
509 * Added patch to fix FTBFS with latest GCC. Closes: #614459
510
511 -- Christian Hammers <ch@debian.org> Tue, 22 Mar 2011 23:13:34 +0100
512
513 quagga (0.99.17-4) unstable; urgency=low
514
515 * Added comment to init script (thanks to Marc Haber). Closes: #599524
516
517 -- Christian Hammers <ch@debian.org> Thu, 13 Jan 2011 23:53:29 +0100
518
519 quagga (0.99.17-3) unstable; urgency=low
520
521 * Fix FTBFS with ld --as-needed (thanks to Matthias Klose at Ubuntu).
522 Closes: #609555
523
524 -- Christian Hammers <ch@debian.org> Thu, 13 Jan 2011 23:27:06 +0100
525
526 quagga (0.99.17-2) unstable; urgency=low
527
528 * Added Danisch Debconf translation (thanks to Joe Dalton). Closes: #596259
529
530 -- Christian Hammers <ch@debian.org> Sat, 18 Sep 2010 12:20:07 +0200
531
532 quagga (0.99.17-1) unstable; urgency=high
533
534 * SECURITY:
535 "This release provides two important bugfixes, which address remote crash
536 possibility in bgpd discovered by CROSS team.":
537 1. Stack buffer overflow by processing certain Route-Refresh messages
538 CVE-2010-2948
539 2. DoS (crash) while processing certain BGP update AS path messages
540 CVE-2010-2949
541 Closes: #594262
542
543 -- Christian Hammers <ch@debian.org> Wed, 25 Aug 2010 00:52:48 +0200
544
545 quagga (0.99.16-1) unstable; urgency=low
546
547 * New upstream release. Closes: #574527
548 * Added chrpath to debian/rules to fix rpath problems that lintian spottet.
549
550 -- Christian Hammers <ch@debian.org> Sun, 21 Mar 2010 17:05:40 +0100
551
552 quagga (0.99.15-2) unstable; urgency=low
553
554 * Applied patch for off-by-one bug in ospf6d that caused a segmentation
555 fault when using the "area a.b.c.d filter-list prefix" command (thanks
556 to Steinar H. Gunderson). Closes: 519488
557
558 -- Christian Hammers <ch@debian.org> Sun, 14 Feb 2010 20:02:03 +0100
559
560 quagga (0.99.15-1) unstable; urgency=low
561
562 * New upstream release
563 "This fixes some annoying little ospfd and ospf6d regressions, which made
564 0.99.14 a bit of a problem release (...) This release still contains a
565 regression in the "no ip address ..." command, at least on Linux.
566 See bug #486, which contains a workaround patch. This release should be
567 considered a 1.0.0 release candidate. Please test this release as widely
568 as possible."
569 * Fixed wrong port number in zebra.8 (thanks to Thijs Kinkhorst).
570 Closes: #517860
571 * Added Russian Debconf tanslation (thanks to Yuri Kozlov).
572 Closes: #539464
573 * Removed so-version in build-dep to libreadline-dev on request of
574 Matthias Klose.
575 * Added README.source with reference to dpatch as suggested by lintian.
576 * Bumped standards versionto 3.8.3.
577
578 -- Christian Hammers <ch@debian.org> Sun, 13 Sep 2009 18:12:06 +0200
579
580 quagga (0.99.14-1) unstable; urgency=low
581
582 * New upstream release
583 "This release contains a regression fix for ospf6d, various small fixes
584 and some hopefully very significant bgpd stability fixes.
585 This release should be considered a 1.0.0 release candidate. Please test
586 this release as widely as possible."
587 * Fixes bug with premature LSA aging in ospf6d. Closes: #535030
588 * Fixes section number in zebra.8 manpage. Closes: #517860
589
590 -- Christian Hammers <ch@debian.org> Sat, 25 Jul 2009 00:40:38 +0200
591
592 quagga (0.99.13-2) unstable; urgency=low
593
594 * Added Japanese Debconf translation (thanks to Hideki Yamane).
595 Closes: #510714
596 * When checking for obsoleted config options in preinst, print filename
597 where it occures (thanks to Michael Bussmann). Closes: #339489
598
599 -- Christian Hammers <ch@debian.org> Sun, 19 Jul 2009 17:13:23 +0200
600
601 quagga (0.99.13-1) unstable; urgency=low
602
603 * New upstream release
604 "This release is contains a number of small fixes, for potentially
605 irritating issues, as well as small enhancements to vtysh and support
606 for linking to PCRE (a much faster regex library)."
607 * Added build-dep to gawk as configure required it for memtypes.awk
608 * Replaced build-dep to gs-gpl with ghostscript as requested by lintian
609 * Minor changes to copyright and control files to make lintian happy.
610
611 -- Christian Hammers <ch@debian.org> Wed, 24 Jun 2009 17:53:28 +0200
612
613 quagga (0.99.12-1) unstable; urgency=high
614
615 * New upstream release
616 "This release fixes an urgent bug in bgpd where it could hit an assert
617 if it received a long AS_PATH with a 4-byte ASN." Noteworthy bugfixes:
618 + [bgpd] Fix bgp ipv4/ipv6 accept handling
619 + [bgpd] AS4 bugfix by Chris Caputo
620 + [bgpd] Allow accepted peers to progress even if realpeer is in Connect
621 + [ospfd] Switch Fletcher checksum back to old ospfd version
622
623 -- Christian Hammers <ch@debian.org> Mon, 22 Jun 2009 00:16:33 +0200
624
625 quagga (0.99.11-1) unstable; urgency=low
626
627 * New upstream release
628 "Most regressions in 0.99 over 0.98 are now believed to be fixed. This
629 release should be considered a release-candidate for a new stable series."
630 + bgpd: Preliminary UI and Linux-IPv4 support for TCP-MD5 merged
631 + zebra: ignore dead routes in RIB update
632 + [ospfd] Default route needs to be refreshed after neighbour state change
633 + [zebra:netlink] Set proto/scope on all route update messages
634 * Removed debian/patches/20_*bgp*md5*.dpatch due to upstream support.
635
636 -- Christian Hammers <ch@debian.org> Thu, 09 Oct 2008 22:56:38 +0200
637
638 quagga (0.99.10-1) unstable; urgency=medium
639
640 * New upstream release
641 + bgpd: 4-Byte AS Number support
642 + Sessions were incorrectly reset if a partial AS-Pathlimit attribute
643 was received.
644 + Advertisement of Multi-Protocol prefixes (i.e. non-IPv4) had been
645 broken in the 0.99.9 release. Closes: #467656
646
647 -- Christian Hammers <ch@debian.org> Tue, 08 Jul 2008 23:32:42 +0200
648
649 quagga (0.99.9-6) unstable; urgency=low
650
651 * Fixed FTBFS by adding a build-dep to libpcre3-dev (thanks to Luk Claes).
652 Closes: #469891
653
654 -- Christian Hammers <ch@debian.org> Sat, 12 Apr 2008 12:53:51 +0200
655
656 quagga (0.99.9-5) unstable; urgency=low
657
658 * C.J. Adams-Collier and Paul Jakma suggested to build against libpcre3
659 which is supposed to be faster.
660
661 -- Christian Hammers <ch@debian.org> Sun, 02 Mar 2008 13:19:42 +0100
662
663 quagga (0.99.9-4) unstable; urgency=low
664
665 * Added hardening-wrapper to the build-deps (thanks to Moritz Muehlenhoff).
666
667 -- Christian Hammers <ch@debian.org> Tue, 29 Jan 2008 22:33:56 +0100
668
669 quagga (0.99.9-3) unstable; urgency=low
670
671 * Replaced the BGP patch by a new one so that the package builds again
672 with kernels above 2.6.21!
673 * debian/control:
674 + Moved quagga-doc to section doc to make lintian happy.
675 * Added Spanish debconf translation (thanks to Carlos Galisteo de Cabo).
676 Closes: #428574
677 * debian/control: (thanks to Marco Rodrigues)
678 + Bump Standards-Version to 3.7.3 (no changes needed).
679 + Add Homepage field.
680
681 -- Christian Hammers <ch@debian.org> Mon, 28 Jan 2008 22:29:18 +0100
682
683 quagga (0.99.9-2.1) unstable; urgency=low
684
685 * Non-maintainer upload.
686 * debian/rules: fixed bashisms. (Closes: #459122)
687
688 -- Miguel Angel Ruiz Manzano <debianized@gmail.com> Tue, 22 Jan 2008 14:37:21 -0300
689
690 quagga (0.99.9-2) unstable; urgency=low
691
692 * Added CVE id for the security bug to the last changelog entry.
693 Closes: 442133
694
695 -- Christian Hammers <ch@debian.org> Tue, 25 Sep 2007 22:01:31 +0200
696
697 quagga (0.99.9-1) unstable; urgency=high
698
699 * SECURITY:
700 "This release fixes two potential DoS conditions in bgpd, reported by Mu
701 Security, where a bgpd could be crashed if a peer sent a malformed OPEN
702 message or a malformed COMMUNITY attribute. Only configured peers can do
703 this, hence we consider these issues to be very low impact." CVE-2007-4826
704
705 -- Christian Hammers <ch@debian.org> Wed, 12 Sep 2007 21:12:41 +0200
706
707 quagga (0.99.8-1) unstable; urgency=low
708
709 * New upstream version.
710
711 -- Christian Hammers <ch@debian.org> Fri, 17 Aug 2007 00:07:04 +0200
712
713 quagga (0.99.7-3) unstable; urgency=medium
714
715 * Applied patch for FTBFS with linux-libc-dev (thanks to Andrew J. Schorr
716 and Lucas Nussbaum). Closes: #429003
717
718 -- Christian Hammers <ch@debian.org> Fri, 22 Jun 2007 21:34:55 +0200
719
720 quagga (0.99.7-2) unstable; urgency=low
721
722 * Added Florian Weimar as co-maintainer. Closes: 421977
723 * Added Dutch debconf translation (thanks to Bart Cornelis).
724 Closes: #420932
725 * Added Portuguese debconf translation (thanks to Rui Branco).
726 Closes: #421185
727 * Improved package description (thanks to Reuben Thomas).
728 Closes: #418933
729 * Added CVE Id to 0.99.6-5 changelog entry.
730
731 -- Christian Hammers <ch@debian.org> Wed, 02 May 2007 20:27:12 +0200
732
733 quagga (0.99.7-1) unstable; urgency=low
734
735 * New upstream release. Closes: #421553
736
737 -- Christian Hammers <ch@debian.org> Mon, 30 Apr 2007 14:22:34 +0200
738
739 quagga (0.99.6-6) unstable; urgency=medium
740
741 * Fixes FTBFS with tetex-live. Closes: #420468
742
743 -- Christian Hammers <ch@debian.org> Mon, 23 Apr 2007 21:34:13 +0200
744
745 quagga (0.99.6-5) unstable; urgency=high
746
747 * SECURITY:
748 The bgpd daemon was vulnerable to a Denial-of-Service. Configured peers
749 could cause a Quagga bgpd to, typically, assert() and abort. The DoS
750 could be triggered by peers by sending an UPDATE message with a crafted,
751 malformed Multi-Protocol reachable/unreachable NLRI attribute.
752 This is CVE-2007-1995 and Quagga Bug#354. Closes: #418323
753
754 -- Christian Hammers <ch@debian.org> Thu, 12 Apr 2007 23:21:58 +0200
755
756 quagga (0.99.6-4) unstable; urgency=low
757
758 * Improved note in README.Debian for SNMP self-builders (thanks to Matthias
759 Wamser). Closes: #414788
760
761 -- Christian Hammers <ch@debian.org> Wed, 14 Mar 2007 02:18:57 +0100
762
763 quagga (0.99.6-3) unstable; urgency=low
764
765 * Updated German Debconf translation (thanks to Matthias Julius).
766 Closes: #409327
767
768 -- Christian Hammers <ch@debian.org> Sat, 10 Feb 2007 15:06:16 +0100
769
770 quagga (0.99.6-2) unstable; urgency=low
771
772 * Updated config.guess/config.sub as suggested by lintian.
773 * Corrected README.Debian text regarding the WANT_SNMP flag.
774
775 -- Christian Hammers <ch@debian.org> Sun, 17 Dec 2006 01:45:37 +0100
776
777 quagga (0.99.6-1) unstable; urgency=low
778
779 * New upstream release. Closes: #402361
780
781 -- Christian Hammers <ch@debian.org> Mon, 11 Dec 2006 00:28:09 +0100
782
783 quagga (0.99.5-5) unstable; urgency=high
784
785 * Changed Depends on adduser to Pre-Depends to avoid uninstallability
786 in certain cases (thanks to Steve Langasek, Lucas Nussbaum).
787 Closes: #398562
788
789 -- Christian Hammers <ch@debian.org> Wed, 15 Nov 2006 17:46:34 +0100
790
791 quagga (0.99.5-4) unstable; urgency=low
792
793 * Added default PAM file and some explanations regarding PAM authentication
794 of vtysh which could prevent the start at boot-time when used wrong.
795 Now PAM permits anybody to access the vtysh tool (a malicious user could
796 build his own vtysh without PAM anyway) and the access is controled by
797 the read/write permissions of the vtysh socket which are only granted to
798 users belonging to the quaggavty group (thanks to Wakko Warner).
799 Closes: #389496
800 * Added "case" to prerm script so that the Debconf question is not called a
801 second time in e.g. "new-prerm abort-upgrade" after being NACKed in the
802 old-prerm.
803
804 -- Christian Hammers <ch@debian.org> Fri, 3 Nov 2006 01:22:15 +0100
805
806 quagga (0.99.5-3) unstable; urgency=medium
807
808 * Backport CVS fix for an OSPF DD Exchange regression (thanks to Matt
809 Brown). Closes: #391040
810
811 -- Christian Hammers <ch@debian.org> Wed, 25 Oct 2006 19:47:11 +0200
812
813 quagga (0.99.5-2) unstable; urgency=medium
814
815 * Added LSB info section to initscript.
816 * Removed unnecessary depends to libncurses5 to make checklib happy.
817 The one to libcap should remain though as it is just temporarily
818 unused.
819
820 -- Christian Hammers <ch@debian.org> Thu, 21 Sep 2006 00:04:07 +0200
821
822 quagga (0.99.5-1) unstable; urgency=low
823
824 * New upstream release. Closes: #38704
825 * Upstream fixes ospfd documentary inconsistency. Closes: #347897
826 * Changed debconf question in prerm to "high" (thanks to Rafal Pietrak).
827
828 -- Christian Hammers <ch@debian.org> Mon, 11 Sep 2006 23:43:42 +0200
829
830 quagga (0.99.4-4) unstable; urgency=low
831
832 * Recreate /var/run if not present because /var is e.g. on a tmpfs
833 filesystem (thanks to Martin Pitt). Closes: #376142
834 * Removed nonexistant option from ospfd.8 manpage (thanks to
835 David Medberry). Closes: 378274
836
837 -- Christian Hammers <ch@debian.org> Sat, 15 Jul 2006 20:22:12 +0200
838
839 quagga (0.99.4-3) unstable; urgency=low
840
841 * Removed invalid semicolon from rules file (thanks to Philippe Gramoulle).
842
843 -- Christian Hammers <ch@debian.org> Tue, 27 Jun 2006 23:36:07 +0200
844
845 quagga (0.99.4-2) unstable; urgency=high
846
847 * Set urgency to high as 0.99.4-1 fixes a security problem!
848 * Fixed building of the info file.
849
850 -- Christian Hammers <ch@debian.org> Sun, 14 May 2006 23:04:28 +0200
851
852 quagga (0.99.4-1) unstable; urgency=low
853
854 * New upstream release to fix a security problem in the telnet interface
855 of the BGP daemon which could be used for DoS attacks (CVE-2006-2276).
856 Closes: 366980
857
858 -- Christian Hammers <ch@debian.org> Sat, 13 May 2006 19:54:40 +0200
859
860 quagga (0.99.3-3) unstable; urgency=low
861
862 * Added CVE numbers for the security patch in 0.99.3-2.
863
864 -- Christian Hammers <ch@debian.org> Sat, 6 May 2006 17:14:22 +0200
865
866 quagga (0.99.3-2) unstable; urgency=high
867
868 * SECURITY:
869 Added security bugfix patch from upstream BTS for security problem
870 that could lead to injected routes when using RIPv1.
871 CVE-2006-2223 - missing configuration to disable RIPv1 or require
872 plaintext or MD5 authentication
873 CVE-2006-2224 - lack of enforcement of RIPv2 authentication requirements
874 Closes: #365940
875 * First amd64 upload.
876
877 -- Christian Hammers <ch@debian.org> Thu, 4 May 2006 00:22:09 +0200
878
879 quagga (0.99.3-1) unstable; urgency=low
880
881 * New upstream release
882
883 -- Christian Hammers <ch@debian.org> Wed, 25 Jan 2006 13:37:27 +0100
884
885 quagga (0.99.2-1) unstable; urgency=low
886
887 * New upstream release
888 Closes: #330248, #175553
889
890 -- Christian Hammers <ch@debian.org> Wed, 16 Nov 2005 00:25:52 +0100
891
892 quagga (0.99.1-7) unstable; urgency=low
893
894 * Changed debian/rules check for mounted /proc directory to check
895 for /proc/1 as not all systems (e.g. 2.6 arm kernels) have
896 /proc/kcore which is a optional feature only (thanks to Lennert
897 Buytenhek). Closes: #335695
898 * Added Swedish Debconf translation (thanks to Daniel Nylander).
899 Closes: #331367
900
901 -- Christian Hammers <ch@debian.org> Thu, 27 Oct 2005 20:53:19 +0200
902
903 quagga (0.99.1-6) unstable; urgency=low
904
905 * Fixed debconf dependency as requested by Joey Hess.
906
907 -- Christian Hammers <ch@debian.org> Mon, 26 Sep 2005 20:47:35 +0200
908
909 quagga (0.99.1-5) unstable; urgency=low
910
911 * Rebuild with libreadline5-dev as build-dep as requested by
912 Matthias Klose. Closes: #326306
913 * Made initscript more fault tolerant against missing lines in
914 /etc/quagga/daemons (thanks to Ralf Hildebrandt). Closes: #323774
915 * Added dependency to adduser.
916
917 -- Christian Hammers <ch@debian.org> Tue, 13 Sep 2005 21:42:17 +0200
918
919 quagga (0.99.1-4) unstable; urgency=low
920
921 * Added French Debconf translation (thanks to Mohammed Adnene Trojette).
922 Closes: #319324
923 * Added Czech Debconf translation (thanks to Miroslav Kure).
924 Closes: #318127
925
926 -- Christian Hammers <ch@debian.org> Sun, 31 Jul 2005 04:19:41 +0200
927
928 quagga (0.99.1-3) unstable; urgency=low
929
930 * A Debconf question now asks the admin before upgrading if the daemon
931 should really be stopped as this could lead to the loss of network
932 connectivity or BGP flaps (thanks to Michael Horn and Achilleas Kotsis).
933 Also added a hint about setting Quagga "on hold" to README.Debian.
934 Closes: #315467
935 * Added patch to build on Linux/ARM.
936
937 -- Christian Hammers <ch@debian.org> Sun, 10 Jul 2005 22:19:38 +0200
938
939 quagga (0.99.1-2) unstable; urgency=low
940
941 * Fixed SNMP enabled command in debian/rules (thanks to Christoph Kluenter).
942 Closes: #306840
943
944 -- Christian Hammers <ch@debian.org> Sat, 4 Jun 2005 14:04:01 +0200
945
946 quagga (0.99.1-1) unstable; urgency=low
947
948 * New upstream version. Among others:
949 - BGP graceful restart and "match ip route-source" added
950 - support for interface renaming
951 - improved threading for better responsivness under load
952 * Switched to dpatch to make diffs cleaner.
953 * Made autoreconf unnecessary.
954 * Replaced quagga.dvi and quagga.ps by quagga.pdf in quagga-doc.
955 (the PostScript would have needed Makefile corrections and PDF
956 is more preferable anyway)
957 * Added isisd to the list of daemons in /etc/init.d/quagga (thanks
958 to Ernesto Elbe).
959 * Added hint for "netlink-listen: overrun" messages (thanks to
960 Hasso Tepper).
961 * Added preinst check that bails out if old smux options are in use
962 as Quagga would not start up else anyway (thanks to Bjorn Mork).
963 Closes: #308320
964
965 -- Christian Hammers <ch@debian.org> Fri, 13 May 2005 01:18:24 +0200
966
967 quagga (0.98.3-7) unstable; urgency=high
968
969 * Removed SNMP support as linking against NetSNMP introduced a dependency
970 to OpenSSL which is not compatible to the GPL which governs this
971 application (thanks to Faidon Liambotis). See README.Debian for more
972 information. Closes: #306840
973 * Changed listening address of ospf6d and ripngd from 127.0.0.1 to "::1".
974 * Added build-dep to groff to let drafz-zebra-00.txt build correctly.
975
976 -- Christian Hammers <ch@debian.org> Wed, 4 May 2005 20:08:14 +0200
977
978 quagga (0.98.3-6) testing-proposed-updates; urgency=high
979
980 * Removed "Recommends kernel-image-2.4" as aptitude then
981 installes a kernel-image for an arbitrary architecture as long
982 as it fullfill that recommendation which can obviously fatal
983 at the next reboot :) Also it is a violation of the policy
984 which mandates a reference to real packages (thanks to Holger Levsen).
985 Closes: #307281
986
987 -- Christian Hammers <ch@debian.org> Tue, 3 May 2005 22:53:39 +0200
988
989 quagga (0.98.3-5) unstable; urgency=high
990
991 * The patch which tried to remove the OpenSSL dependency, which is
992 not only unneccessary but also a violation of the licence and thus RC,
993 stopped working a while ago, since autoreconf is no longer run before
994 building the binaries. So now ./configure is patched directly (thanks
995 to Faidon Liambotis for reporting). Closes: #306840
996 * Raised Debhelper compatibility level from 3 to 4. Nothing changed.
997 * Added build-dep to texinfo (>= 4.7) to ease work for www.backports.org.
998
999 -- Christian Hammers <ch@debian.org> Fri, 29 Apr 2005 02:31:03 +0200
1000
1001 quagga (0.98.3-4) unstable; urgency=low
1002
1003 * Removed Debconf upgrade note as it was considered a Debconf abuse
1004 and apart from that so obvious that it was not even worth to be
1005 put into NEWS.Debian (thanks to Steve Langasek). Closes: #306384
1006
1007 -- Christian Hammers <ch@debian.org> Wed, 27 Apr 2005 00:10:24 +0200
1008
1009 quagga (0.98.3-3) unstable; urgency=medium
1010
1011 * Adding the debconf module due to a lintian suggestion is a very
1012 bad idea if no db_stop is called as the script hangs then (thanks
1013 to Tore Anderson for reporting). Closes: #306324
1014
1015 -- Christian Hammers <ch@debian.org> Mon, 25 Apr 2005 21:55:58 +0200
1016
1017 quagga (0.98.3-2) unstable; urgency=low
1018
1019 * Added debconf confmodule to postinst as lintian suggested.
1020
1021 -- Christian Hammers <ch@debian.org> Sun, 24 Apr 2005 13:16:00 +0200
1022
1023 quagga (0.98.3-1) unstable; urgency=low
1024
1025 * New upstream release.
1026 Mmost notably fixes last regression in bgpd (reannounce of prefixes
1027 with changed attributes works again), race condition in netlink
1028 handling while using IPv6, MTU changes handling in ospfd and several
1029 crashes in ospfd, bgpd and ospf6d.
1030
1031 -- Christian Hammers <ch@debian.org> Mon, 4 Apr 2005 12:51:24 +0200
1032
1033 quagga (0.98.2-2) unstable; urgency=low
1034
1035 * Added patch to let Quagga compile with gcc-4.0 (thanks to
1036 Andreas Jochens). Closes: #300949
1037
1038 -- Christian Hammers <ch@debian.org> Fri, 25 Mar 2005 19:33:30 +0100
1039
1040 quagga (0.98.2-1) unstable; urgency=medium
1041
1042 * Quoting the upstream announcement:
1043 The 0.98.1 release unfortunately was a brown paper bag release with
1044 respect to ospfd. [...] 0.98.2 has been released, with one crucial change
1045 to fix the unfortunate mistake in 0.98.1, which caused problems if
1046 ospfd became DR.
1047 * Note: the upstream tarball had a strange problem, apparently redhat.spec
1048 was twice in it? At least debuild gave a strange error message so I
1049 unpacked it by hand. No changes were made to the .orig.tar.gz!
1050
1051 -- Christian Hammers <ch@debian.org> Fri, 4 Feb 2005 01:31:36 +0100
1052
1053 quagga (0.98.1-1) unstable; urgency=medium
1054
1055 * New upstream version
1056 "fixing a fatal OSPF + MD5 auth regression, and a non-fatal high-load
1057 regression in bgpd which were present in the 0.98.0 release."
1058 * Upstream version fixes bug in ospfd that could lead to crash when OSPF
1059 packages had a MTU > 1500. Closes: #290566
1060 * Added notice regarding capability kernel support to README.Debian
1061 (thanks to Florian Weimer). Closes: #291509
1062 * Changed permission setting in postinst script (thanks to Bastian Blank).
1063 Closes: #292690
1064
1065 -- Christian Hammers <ch@debian.org> Tue, 1 Feb 2005 02:01:27 +0100
1066
1067 quagga (0.98.0-3) unstable; urgency=low
1068
1069 * Fixed problem in init script. Closes: #290317
1070 * Removed obsolete "smux peer enable" patch.
1071
1072 -- Christian Hammers <ch@debian.org> Fri, 14 Jan 2005 17:37:27 +0100
1073
1074 quagga (0.98.0-2) unstable; urgency=low
1075
1076 * Updated broken TCP MD5 patch for BGP (thanks to John P. Looney
1077 for telling me).
1078
1079 -- Christian Hammers <ch@debian.org> Thu, 13 Jan 2005 02:03:54 +0100
1080
1081 quagga (0.98.0-1) unstable; urgency=low
1082
1083 * New upstream release
1084 * Added kernel-image-2.6 as alternative to 2.4 to the recommends
1085 (thanks to Faidon Liambotis). Closes: #289530
1086
1087 -- Christian Hammers <ch@debian.org> Mon, 10 Jan 2005 19:36:17 +0100
1088
1089 quagga (0.97.5-1) unstable; urgency=low
1090
1091 * New upstream version.
1092 * Added Czech debconf translation (thanks to Miroslav Kure).
1093 Closes: #287293
1094 * Added Brazilian debconf translation (thanks to Andre Luis Lopes).
1095 Closes: #279352
1096
1097 -- Christian Hammers <ch@debian.org> Wed, 5 Jan 2005 23:49:57 +0100
1098
1099 quagga (0.97.4-2) unstable; urgency=low
1100
1101 * Fixed quagga.info build problem.
1102
1103 -- Christian Hammers <ch@debian.org> Wed, 5 Jan 2005 22:38:01 +0100
1104
1105 quagga (0.97.4-1) unstable; urgency=low
1106
1107 * New upstream release.
1108
1109 -- Christian Hammers <ch@debian.org> Tue, 4 Jan 2005 01:45:22 +0100
1110
1111 quagga (0.97.3-2) unstable; urgency=low
1112
1113 * Included isisd in the daemon list.
1114 * Wrote an isisd manpage.
1115 * It is now ensured that zebra is always the last daemon to be stopped.
1116 * (Thanks to Hasso Tepper for mailing me a long list of suggestions
1117 which lead to this release)
1118
1119 -- Christian Hammers <ch@debian.org> Sat, 18 Dec 2004 13:14:55 +0100
1120
1121 quagga (0.97.3-1) unstable; urgency=medium
1122
1123 * New upstream version.
1124 - Fixes important OSPF bug.
1125 * Added ht-20040911-smux.patch regarding Quagga bug #112.
1126 * Updated ht-20041109-0.97.3-bgp-md5.patch for BGP with TCP MD5
1127 (thanks to Matthias Wamser).
1128
1129 -- Christian Hammers <ch@debian.org> Tue, 9 Nov 2004 17:45:26 +0100
1130
1131 quagga (0.97.2-4) unstable; urgency=low
1132
1133 * Added Portuguese debconf translation (thanks to Andre Luis Lopes).
1134 Closes: #279352
1135 * Disabled ospfapi server by default on recommendation of Paul Jakma.
1136
1137 -- Christian Hammers <ch@debian.org> Sun, 7 Nov 2004 15:07:05 +0100
1138
1139 quagga (0.97.2-3) unstable; urgency=low
1140
1141 * Added Andrew Schorrs VTY Buffer patch from the [quagga-dev 1729].
1142
1143 -- Christian Hammers <ch@debian.org> Tue, 2 Nov 2004 00:46:56 +0100
1144
1145 quagga (0.97.2-2) unstable; urgency=low
1146
1147 * Changed file and directory permissions and ownerships according to a
1148 suggestion from Paul Jakma. Still not perfect though.
1149 * Fixed upstream vtysh.conf.sample file.
1150 * "ip ospf network broadcast" is now saved correctly. Closes: #244116
1151 * Daemon options are now in /etc/quagga/debian.conf to be user
1152 configurable (thanks to Simon Raven and Hasso Tepper). Closes: #266715
1153
1154 -- Christian Hammers <ch@debian.org> Tue, 26 Oct 2004 23:35:45 +0200
1155
1156 quagga (0.97.2-1) unstable; urgency=low
1157
1158 * New upstream version.
1159 Closes: #254541
1160 * Fixed warning on unmodular kernels (thanks to Christoph Biedl).
1161 Closes: #277973
1162
1163 -- Christian Hammers <ch@debian.org> Mon, 25 Oct 2004 00:47:04 +0200
1164
1165 quagga (0.97.1-2) unstable; urgency=low
1166
1167 * Version 0.97 introduced shared libraries. They are now included.
1168 (thanks to Raf D'Halleweyn). Closes: #277446
1169
1170 -- Christian Hammers <ch@debian.org> Wed, 20 Oct 2004 15:32:06 +0200
1171
1172 quagga (0.97.1-1) unstable; urgency=low
1173
1174 * New upstream version.
1175 * Removed some obsolete files from debian/patches.
1176 * Added patch from upstream bug 113. Closes: #254541
1177 * Added patch from upstream that fixes a compilation problem in the
1178 ospfclient code (thanks to Hasso Tepper).
1179 * Updated German debconf translation (thanks to Jens Nachtigall)
1180 Closes: #277059
1181
1182 -- Christian Hammers <ch@debian.org> Mon, 18 Oct 2004 01:16:35 +0200
1183
1184 quagga (0.96.5-11) unstable; urgency=low
1185
1186 * Fixed /tmp/buildd/* paths in binaries.
1187 For some unknown reason the upstream Makefile modified a .h file at
1188 the end of the "debian/rules build" target. During the following
1189 "make install" one library got thus be re*compiled* - with /tmp/buildd
1190 paths as sysconfdir (thanks to Peder Chr. Norgaard). Closes: #274050
1191
1192 -- Christian Hammers <ch@debian.org> Fri, 1 Oct 2004 01:21:02 +0200
1193
1194 quagga (0.96.5-10) unstable; urgency=medium
1195
1196 * The BGP routing daemon might freeze on network disturbances when
1197 their peer is also a Quagga/Zebra router.
1198 Applied patch from http://bugzilla.quagga.net/show_bug.cgi?id=102
1199 which has been confirmed by the upstream author.
1200 (thanks to Gunther Stammwitz)
1201 * Changed --enable-pam to --with-libpam (thanks to Hasso Tepper).
1202 Closes: #264562
1203 * Added patch for vtysh (thanks to Hasso Tepper). Closes: #215919
1204
1205 -- Christian Hammers <ch@debian.org> Mon, 9 Aug 2004 15:33:02 +0200
1206
1207 quagga (0.96.5-9) unstable; urgency=low
1208
1209 * Rewrote the documentation chapter about SNMP support. Closes: #195653
1210 * Added MPLS docs.
1211
1212 -- Christian Hammers <ch@debian.org> Thu, 29 Jul 2004 21:01:52 +0200
1213
1214 quagga (0.96.5-8) unstable; urgency=low
1215
1216 * Adjusted a grep in the initscript to also match a modprobe message
1217 from older modutils packages (thanks to Faidon Paravoid).
1218
1219 -- Christian Hammers <ch@debian.org> Wed, 28 Jul 2004 21:19:02 +0200
1220
1221 quagga (0.96.5-7) unstable; urgency=low
1222
1223 * Added a "cd /etc/quagga/" to the init script as quagga tries to load
1224 the config file first from the current working dir and then from the
1225 config dir which could lead to confusion (thanks to Marco d'Itri).
1226 Closes: #255078
1227 * Removed warning regarding problems with the Debian kernels from
1228 README.Debian as they are no longer valid (thanks to Raphael Hertzog).
1229 Closes: #257580
1230 * Added patch from Hasso Tepper that makes "terminal length 0" work
1231 in vtysh (thanks to Matthias Wamser). Closes: #252579
1232
1233 -- Christian Hammers <ch@debian.org> Thu, 8 Jul 2004 21:53:21 +0200
1234
1235 quagga (0.96.5-6) unstable; urgency=low
1236
1237 * Try to load the capability module as it is needed now.
1238
1239 -- Christian Hammers <ch@debian.org> Tue, 8 Jun 2004 23:25:29 +0200
1240
1241 quagga (0.96.5-5) unstable; urgency=low
1242
1243 * Changed the homedir of the quagga user to /etc/quagga/ to allow
1244 admins to put ~/.ssh/authorized_keys there (thanks to Matthias Wamser).
1245 Closes: #252577
1246
1247 -- Christian Hammers <ch@debian.org> Sat, 5 Jun 2004 14:47:31 +0200
1248
1249 quagga (0.96.5-4) unstable; urgency=medium
1250
1251 * Fixed rules file to use the renamed ./configure option --enable-tcp-md5
1252 (thanks to Matthias Wamser). Closes: #252141
1253
1254 -- Christian Hammers <ch@debian.org> Tue, 1 Jun 2004 22:58:32 +0200
1255
1256 quagga (0.96.5-3) unstable; urgency=low
1257
1258 * Provided default binary package name to all build depends that were
1259 virtual packages (thanks to Goswin von Brederlow). Closes: #251625
1260
1261 -- Christian Hammers <ch@debian.org> Sat, 29 May 2004 22:48:53 +0200
1262
1263 quagga (0.96.5-2) unstable; urgency=low
1264
1265 * New upstream version.
1266 * New md5 patch version (thanks to Niklas Jakobsson and Hasso Tepper).
1267 Closes: #250985
1268 * Fixes info file generation (thanks to Peder Chr. Norgaard).
1269 Closes: #250992
1270 * Added catalan debconf translation (thanks to Aleix Badia i Bosch).
1271 Closes: #250118
1272 * PATCHES:
1273 This release contains BGP4 MD5 support which requires a kernel patch
1274 to work. See /usr/share/doc/quagga/README.Debian.MD5.
1275 (The patch is ht-20040525-0.96.5-bgp-md5.patch from Hasso Tepper)
1276
1277 -- Christian Hammers <ch@debian.org> Thu, 27 May 2004 20:09:37 +0200
1278
1279 quagga (0.96.5-1) unstable; urgency=low
1280
1281 * New upstream version.
1282 * PATCHES:
1283 This release contains BGP4 MD5 support which also requires a kernel patch.
1284 See /usr/share/doc/quagga/README.Debian.MD5 and search for CAN-2004-0230.
1285
1286 -- Christian Hammers <ch@debian.org> Sun, 16 May 2004 17:40:40 +0200
1287
1288 quagga (0.96.4x-10) unstable; urgency=low
1289
1290 * SECURITY:
1291 This release contains support for MD5 for BGP which is one suggested
1292 prevention of the actually long known TCP SYN/RST attacks which got
1293 much news in the last days as ideas were revealed that made them much
1294 easier probable agains especially the BGP sessions than commonly known.
1295 There are a lot of arguments agains the MD5 approach but some ISPs
1296 started to require it.
1297 See: CAN-2004-0230, http://www.us-cert.gov/cas/techalerts/TA04-111A.html
1298 * PATCHES:
1299 This release contains the MD5 patch from Hasso Tepper. It also seems to
1300 required a kernel patch. See /usr/share/doc/quagga/README.Debian.MD5.
1301
1302 -- Christian Hammers <ch@debian.org> Thu, 29 Apr 2004 01:01:38 +0200
1303
1304 quagga (0.96.4x-9) unstable; urgency=low
1305
1306 * Fixed daemon loading order (thanks to Matt Kemner).
1307 * Fixed typo in init script (thanks to Charlie Brett). Closes: #238582
1308
1309 -- Christian Hammers <ch@debian.org> Sun, 4 Apr 2004 15:32:18 +0200
1310
1311 quagga (0.96.4x-8) unstable; urgency=low
1312
1313 * Patched upstream source so that quagga header files end up in
1314 /usr/include/quagga/. Closes: #233792
1315
1316 -- Christian Hammers <ch@debian.org> Mon, 23 Feb 2004 01:42:53 +0100
1317
1318 quagga (0.96.4x-7) unstable; urgency=low
1319
1320 * Fixed info file installation (thanks to Holger Dietze). Closes: #227579
1321 * Added Japanese translation (thanks to Hideki Yamane). Closes: #227812
1322
1323 -- Christian Hammers <ch@debian.org> Sun, 18 Jan 2004 17:28:29 +0100
1324
1325 quagga (0.96.4x-6) unstable; urgency=low
1326
1327 * Added dependency to iproute.
1328 * Initscript now checks not only for the pid file but also for the
1329 daemons presence (thanks to Phil Gregory). Closes: #224389
1330 * Added my patch to configure file permissions.
1331
1332 -- Christian Hammers <ch@debian.org> Mon, 15 Dec 2003 22:34:29 +0100
1333
1334 quagga (0.96.4x-5) unstable; urgency=low
1335
1336 * Added patch which gives bgpd the CAP_NET_RAW capability to allow it
1337 to bind to special IPv6 link-local interfaces (Thanks to Bastian Blank).
1338 Closes: #222930
1339 * Made woody backport easier by applying Colin Watsons po-debconf hack.
1340 Thanks to Marc Haber for suggesting it. Closes: #223527
1341 * Made woody backport easier by applying a patch that removes some
1342 obscure whitespaces inside an C macro. (Thanks to Marc Haber).
1343 Closes: #223529
1344 * Now uses /usr/bin/pager. Closes: #204070
1345 * Added note about the "official woody backports" on my homepage.
1346
1347 -- Christian Hammers <ch@debian.org> Mon, 15 Dec 2003 20:39:06 +0100
1348
1349 quagga (0.96.4x-4) unstable; urgency=high
1350
1351 * SECURITY:
1352 Fixes another bug that was originally reported against Zebra.
1353 .
1354 http://rhn.redhat.com/errata/RHSA-2003-307.html
1355 Herbert Xu reported that Zebra can accept spoofed messages sent on the
1356 kernel netlink interface by other users on the local machine. This could
1357 lead to a local denial of service attack. The Common Vulnerabilities and
1358 Exposures project (cve.mitre.org) has assigned the name CAN-2003-0858 to
1359 this issue.
1360
1361 * Minor improvements to init script (thanks to Iustin Pop).
1362 Closes: #220938
1363
1364 -- Christian Hammers <ch@debian.org> Sat, 22 Nov 2003 13:27:57 +0100
1365
1366 quagga (0.96.4x-3) unstable; urgency=low
1367
1368 * Changed "more" to "/usr/bin/pager" as default pager if $PAGER or
1369 $VTYSH_PAGER is not set (thanks to Bastian Blank). Closes: #204070
1370 * Made the directory (but not the config/log files!) world accessible
1371 again on user request (thanks to Anand Kumria)). Closes: #213129
1372 * No longer providing sample configuration in /etc/quagga/. They are
1373 now only available in /usr/share/doc/quagga/ to avoid accidently
1374 using them without changing the adresses (thanks to Marc Haber).
1375 Closes: #215918
1376
1377 -- Christian Hammers <ch@debian.org> Sun, 16 Nov 2003 16:59:30 +0100
1378
1379 quagga (0.96.4x-2) unstable; urgency=low
1380
1381 * Fixed permission problem with pidfile (thanks to Kir Kostuchenko).
1382 Closes: #220938
1383
1384 -- Christian Hammers <ch@debian.org> Sun, 16 Nov 2003 14:24:08 +0100
1385
1386 quagga (0.96.4x-1) unstable; urgency=low
1387
1388 * Reupload of 0.96.4. Last upload-in-a-hurry produced a totally
1389 crappy .tar.gz file. Closes: #220621
1390
1391 -- Christian Hammers <ch@debian.org> Fri, 14 Nov 2003 19:45:57 +0100
1392
1393 quagga (0.96.4-1) unstable; urgency=high
1394
1395 * SECURITY: Remote DoS of protocol daemons.
1396 Fix for a remote triggerable crash in vty layer. The management
1397 ports ("telnet myrouter ospfd") should not be open to the internet!
1398
1399 * New upstream version.
1400 - OSPF bugfixes.
1401 - Some improvements for bgp and rip.
1402
1403 -- Christian Hammers <ch@debian.org> Thu, 13 Nov 2003 11:52:27 +0100
1404
1405 quagga (0.96.3-3) unstable; urgency=low
1406
1407 * Fixed pid file generation by substituting the daemons "-d" by the
1408 start-stop-daemon option "--background" (thanks to Micha Gaisser).
1409 Closes: #218103
1410
1411 -- Christian Hammers <ch@debian.org> Wed, 29 Oct 2003 05:17:49 +0100
1412
1413 quagga (0.96.3-2) unstable; urgency=low
1414
1415 * Readded GNOME-PRODUCT-ZEBRA-MIB.
1416
1417 -- Christian Hammers <ch@debian.org> Thu, 23 Oct 2003 06:17:03 +0200
1418
1419 quagga (0.96.3-1) unstable; urgency=medium
1420
1421 * New upstream version.
1422 * Removed -u and -e in postrm due to problems with debhelper and userdel
1423 (thanks to Adam Majer and Jaakko Niemi). Closes: #216770
1424 * Removed SNMP MIBs as they are now included in libsnmp-base (thanks to
1425 David Engel and Peter Gervai). Closes: #216138, #216086
1426 * Fixed seq command in init script (thanks to Marc Haber). Closes: #215915
1427 * Improved /proc check (thanks to Marc Haber). Closes: #212331
1428
1429 -- Christian Hammers <ch@debian.org> Thu, 23 Oct 2003 03:42:02 +0200
1430
1431 quagga (0.96.2-9) unstable; urgency=medium
1432
1433 * Removed /usr/share/info/dir.* which were accidently there and prevented
1434 the installation by dpkg (thanks to Simon Raven). Closes: #212614
1435 * Reworded package description (thanks to Anand Kumria). Closes: #213125
1436 * Added french debconf translation (thanks to Christian Perrier).
1437 Closes: #212803
1438
1439 -- Christian Hammers <ch@debian.org> Tue, 7 Oct 2003 13:26:58 +0200
1440
1441 quagga (0.96.2-8) unstable; urgency=low
1442
1443 * debian/rules now checks if /proc is mounted as ./configure needs
1444 it but just fails with an obscure error message if it is absent.
1445 (Thanks to Norbert Tretkowski). Closes: #212331
1446
1447 -- Christian Hammers <ch@debian.org> Tue, 23 Sep 2003 12:57:38 +0200
1448
1449 quagga (0.96.2-7) unstable; urgency=low
1450
1451 * Last build was rejected due to a buggy dpkg-dev version. Rebuild.
1452
1453 -- Christian Hammers <ch@debian.org> Mon, 22 Sep 2003 20:34:12 +0200
1454
1455 quagga (0.96.2-6) unstable; urgency=low
1456
1457 * Fixed init script so that is is now possible to just start
1458 the bgpd but not the zebra daemon. Also daemons are now actually
1459 started in the order defined their priority. (Thanks to Thomas Kaehn
1460 and Jochen Friedrich) Closes: #210924
1461
1462 -- Christian Hammers <ch@debian.org> Fri, 19 Sep 2003 21:17:02 +0200
1463
1464 quagga (0.96.2-5) unstable; urgency=low
1465
1466 * For using quagga as BGP route server or similar, it is not
1467 wanted to have the zebra daemon running too. For this reason
1468 it can now be disabled in /etc/quagga/daemons, too.
1469 (Thanks to Jochen Friedrich). Closes: #210924
1470 * Attached *unapplied* patch for the ISIS protocol. I did not dare
1471 to apply it as long as upstream does not do it but this way give
1472 users the possibilities to use it if they like to.
1473 (Thanks to Remco van Mook)
1474
1475 -- Christian Hammers <ch@debian.org> Wed, 17 Sep 2003 19:57:31 +0200
1476
1477 quagga (0.96.2-4) unstable; urgency=low
1478
1479 * Enabled IPV6 router advertisement feature by default on user request
1480 (thanks to Jochen Friedrich and Hasso Tepper). Closes: #210732
1481 * Updated GNU autoconf to let it build on hppa/parisc64 (thanks to
1482 lamont). Closes: #210492
1483
1484 -- Christian Hammers <ch@debian.org> Sat, 13 Sep 2003 14:11:13 +0200
1485
1486 quagga (0.96.2-3) unstable; urgency=medium
1487
1488 * Removed unnecessary "-lcrypto" to avoid dependency against OpenSSL
1489 which would require further copyright addtions.
1490
1491 -- Christian Hammers <ch@debian.org> Wed, 10 Sep 2003 01:37:28 +0200
1492
1493 quagga (0.96.2-2) unstable; urgency=low
1494
1495 * Added note that config files of quagga are in /etc/quagga and
1496 not /etc/zebra for the zebra users that migrate to quagga.
1497 (Thanks to Roberto Suarez Soto for the idea)
1498 * Fixed setgid rights in /etc/quagga.
1499
1500 -- Christian Hammers <ch@debian.org> Wed, 27 Aug 2003 14:05:39 +0200
1501
1502 quagga (0.96.2-1) unstable; urgency=low
1503
1504 * This package has formally been known as "zebra-pj"!
1505 * New upstream release.
1506 Fixes "anoying OSPF problem".
1507 * Modified group ownerships so that vtysh can now be used by normal
1508 uses if they are in the quaggavty group.
1509
1510 -- Christian Hammers <ch@debian.org> Mon, 25 Aug 2003 23:40:14 +0200
1511
1512 quagga (0.96.1-1) unstable; urgency=low
1513
1514 * Zebra-pj, the fork of zebra has been renamed to quagga as the original
1515 upstream author asked the new project membed not to use "zebra" in the
1516 name. zebra-pj is obsolete.
1517
1518 -- Christian Hammers <ch@debian.org> Mon, 18 Aug 2003 23:37:20 +0200
1519
1520 zebra-pj (0.94+cvs20030721-1) unstable; urgency=low
1521
1522 * New CVS build.
1523 - OSPF changes (integration of the OSPF API?)
1524 - code cleanups (for ipv6?)
1525 * Tightened Build-Deps to gcc-2.95 as 3.x does not compile a stable ospfd.
1526 This is a known problem and has been discussed on the mailing list.
1527 No other solutions so far.
1528
1529 -- Christian Hammers <ch@debian.org> Mon, 21 Jul 2003 23:52:00 +0200
1530
1531 zebra-pj (0.94+cvs20030701-1) unstable; urgency=low
1532
1533 * Initial Release.
1534
1535 -- Christian Hammers <ch@debian.org> Tue, 1 Jul 2003 01:58:06 +0200