frr-devel-8.4-150500.4.26.1 < > , h fKp9|?3 2h(PR!}9"B<9)p0]2IM T"Np} pu
h L\ ӒO-|O r&P/tAxV{ VVսqP*3#FnmkI+ AhDӐxBQYi[ m ԃYym0 ߪnU^sؽ !C躬\SVژ1s nTpu#]Ҙtvu &0M7/@ =-U > ; ? d J 5 K k
D +r
, / 1 4 4 7T 7p 7 8i ( 8 8 8 ) 9 9P ) : ; ) F t G t H w0 I y X z Y z( \ zL ] | ^ b W c d ~ e f l u v z \ l p v C frr-devel 8.4 150500.4.26.1 Header and object files for frr development The frr-devel package contains the header and object files necessary for
developing OSPF-API and frr applications. fKh01-ch3a FSSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later AND LGPL-2.1-or-later https://www.suse.com/ Development/Libraries/C and C++ https://www.frrouting.org linux x86_64 J # 1 ) $_ h 4 : _ } M
! f # U C )* m % 8 v $ *
S } +
,( Q O !
s ^ ! 6 u L + l] |7 -N C A n 1
^ O - @ q
{ & x G @ %& '}
5{ # / ] + G a i ) (z ? i A큤A큤A큤A큤A큤 fKcc9dcc9dcc9dcc9dcc9dfKcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dfKcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dfKcc9dfKcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dfKscc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dfKscc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dcc9dfKfKfKfKfKfKfKfK c848bb4c5b0e9a0b5c58567c6a854b8c6ff228abfbc15c0078fbcdc0e7bb6250 9f0a914b91ff407414dd17949089466d8fbae3d3c9a22857bcfe13e144d8c36d dad740e3a8173858fab26a8fd675ff714769b01c12996145e3a80d2aaaa7b788 6cbdc34a530795eee4953e9bfb8abdb4f07b152ab99979f24534ff46edcf5892 7d8c50a0ab8780ff9ab05db804db17a79b184a0f8bf15b4d911d11f3fc7fa361 ae776f96bf453b6580120c8aa4a6b5f012e22e2dda5b848356eecfc4dfa40b4d 854959b803f10e1983580565e542bbadb5117eb14e918948d44a40c9c698e186 a459373df22806f56d43236eaf3ed7f12d9b17b899f801482a8df8062f80317d 44e03cb13875f38ed2475cf5776f7dc700e7259b3ba9dc07ddc0a36c1c594e55 915503329a36731f0221b01b5253c9f699661c2f656d38298f2dc9aa87a08c58 22fd713c8580ae843938c5d34e2e8ebad208301e96d1a5cadffad309985b56cb eb34f62643a9d95ea43d6008b680defd912cb361f6f97c1db3d8f9245e4e71ba de9f7d7fa468f6d97414d53d87e6cfb77540dc5d03f4a3a42f173d5493ab1f8a 793e04f42d3655aca2f7a2c2a7eb93dc7e1a6a638bd252c99adc6b6b9fb14311 34b3307eba542164932283ef8d9f703e7e4a968acaace1a0955d75dfa1168094 7feec3308492fa73d3fcdf9b0865c0774572fdb287c4427595576afa9943b548 ef38f1bd15dfb2861fea92b15216136a52d2faaf17d46cbc0fede33e172d9006 c8bc7b7aa372b78dc6ca2f3ef36a97e4760164c50161f7ca8e661a6ba4f5dffe 843edb796d5604661ff60a9f6220e5ccd5815d66d83db2eddc9ecf336acd5c46 c97a2bf260d434f66f976e1e63701d3a70d44d072726c7e0afb629ab2214b257 46c09d83e003e34b130a64e67c6c574c25b482de2d3871292a859904cda0112e 0f140e94ac452a91f1dc2646bfa2f68e8ec709b57258586df31a25e29fc2cc5f 1f5b13376a95d6990c5a4434748b21d4670d19e6172e3bd7e39db76be4ccf25b 70dc6d215d8be9159cd0b5715ca6dbda914594e6a977339c887f776b81a18970 f8ef8a5c8d69d7bb8a72bdf4965fdd3eced9aef14d30a3d5c4375bb5fa6441f4 5826dac68bc7ae6e1f0189d3381f2b511a4c9098e1c2c3b09e78ba5577da6521 4dd4e419592179964afe78f4b5f3b515b555e7c9ad0f7292551ac3b4fdd7dc51 e80cded0bb614045e89b6b7596f68dc7eb7757cd71300a97ce618a92ff04ae11 88335df2036b65910c540b26185cb474f8f968dd52668120e979646514f15ccf 6cfe0c7ef69af23292e2c95e24add2bda99f7522dfa0716cb5fb704d0ae63714 db1ff787e1e6b448fdd0ed463496842c0a5b19181308cdda3bbcb78a79f6737e 3da33dfaacde641224913f4adc7830ae50943d88b1304008b1808d920e9e921c b1b3482512704b64a152b8f87b4a1eea26c35ae1051c337f254a0d26db7e7a0d 2e934cfc8d027e688d297c5205133e73c414c41a222809c4ecaa3cdcb21c632e 03f8a75eea5319e6fc37bd4da9d44af3f582cfa11bcf8da03268acaf131de234 96029e33d28ed2de8d942a47ba895f34c5aebd7838889d1544fb834ffadc5e82 0de3e011a1dde5709d356b3e4b268786f76ef31be1d522fd662c57d8a1577a04 208b29931ff32e209aed6825b08ed615eaf14d7d30ef6064548e3e7e2d560569 176c39880e4e12d23864d3d224bc4c21ae0cbc0062bdaa9ac230b95e7716e164 7347324517940a6a98623e2046b6b29eff5f713ceb3696bd2062946f1569524a eb94e79185394d0d12f0e2b79bc69dc6e6419fc4bd0ef0c343513e61af323b56 4903d053f0f4e73fe174084ebd506002e3552281fdcd0a418b30c94e3db37f1a f63dc1efe340b7bebfa3ac656fb64a694b127d4de98c72bc917dd7848267e98d 73beccb3a25afbf321e198dc060ee0390cd87095d3e7e76bddd0794a72e23237 ba7c148003b71d9ae4fc24fa53b364e3e6070c88a81cfcde3aa792597534b285 2c28220a29810ad2131d0fa560349e2c7e2a4faf1f6a0b60cf2a6df84dea0125 e523bc7cb5531ccedd54072c5e00c70e1f75b0cc6625879b44073d730d698823 57f8cebff26a5e2eee0faa8dc19fc5199db19fff5988fca2e5ebdb05c0e2d707 fedac81f489da251b6e76e6082249d4f873fcdd205f7873ce2297d4338fee6ad ec65581fa96bb5ab56736a97c510b5be6432abcbeee77174467565ad2cf0111d e28934c5140e0a0ce88c8198a727b23c42d4e623903352d48292c56915d489aa b60b1297f775d5164e08fa867d86fafc395d8ecdf8d4da6ae2d79c032b1779e7 caff905ccab8cc47afb63f25a53a84e28ed1efd64e61994a5673b5d7222e1583 c919b82c1d8602074b1610b17c64dcb1e42297291c78302841d89e68952cf224 5c2ba0bb0249dd41d091a7175df3e2b14cee529a1c309593d28d258b68f36820 71ad2f26016044a3b08dfd8b01d777ca5f738a1474362baa4c0cea0f5bbedb62 7f1bd1704a818ef5e78105f6b392efa2da33b617c38053e123009e0c58bf238b 5c17c692ad3a20bb17a7bc3c0a68357ca1068c7456b7045994f9c02d68824357 d5d676ae410dea58545d642a86be93271112bf93ea178648557be7909e12cc8e b28c04fd2824d7dc0c65e980a71d37d97355500ae1adab247599ccb77b2bca70 d4fc0c380cc4fbb3293d2d08284b65a8ca981d8658949028b155e7d56da3ecc1 da63eceb5a65a3ac287d9aee61f612c098d498ab1f691a73d3778f6f624fd9a4 5701424533712d06a2215dffb086690238df91f9a968f4ac100c264d8752fe8c 1d6fa0d3fa3f983d4b79d7723e7a45382f61e432b323c2cfda66206f880b358f cb628c83317f9392e86313d7e9babe1dacd568a1065157c2cc704c96f17ed726 7eb1e5bfa7d5ac74bafddaf59f165de12a9bf057e0e1f0d4a9740bcd40f2e80b 923c982f320422c3c7656826d509761f3552c9a2f8bff00b07399239d7665436 bbc9c134c9bb82702ba65bac94612a95b176c9714424bcb209df8e1bfbaf640d 08b2cebb1f6dc48caeae0d83f7f1bb3d10a07f81bbb00062da077f5e1e4e372d fb5bf7a342f81531f7397615f7c402a134ed23f01afaccfc6b0b597ccc273d73 6a4a7aac62f554ab6d5cbd93557cdb87edb20ee092089707e588412c13963346 fb5b4d394eb11ca1f3afe14263ae84854e305501d94302d7776b3889e5d29ca5 0d0c8a75c900885619fe7c75d77b7cf61a33946f3556d6055e2ff0b49f7fdb49 64160510cd207e717915e531605d5fd8efcce06eda9ab658ae1daa915e552909 83cbeec1eff6b817385fb3aa14a1ee01cee25dfe0a4b75a73977b10607bbaa7d 2ec7ce6a6dc1382188663aa0a26e924db53ee41df1f79cb1a8749239c81bf143 18bd7b4645c791007bfc799a7d55543ebf41a6c0fad6293c1db7833680e8474e 94edb86bd299bfdc30cc384d1e9a14c5eb0b17ebf784190f187c89ae444bb25d 5e7c3319d4bb471ba56757b61a1ec9b191a321420de167ebb8661427ef4d1228 b132c9c91c0cd037aac140fe2a73cae346866f30e2af3fde3a782ef3b7a0f487 8479722f06e44f07985c5850882a1f37520aa143affad3930a4d92884abca820 1d191c7fef999e6f8948d45bc9452b0135dfa8d2c70bda1ed53ef003e9ce2f24 2a5e46a90a7ba15d0b3ed042c8e0394539f5ef24012f48c2e4f586ab62f270f1 4cd1290d5368662b690d6821ee0677a830948c4d467a760da469358e63e57438 9556699c28a616f1e13a482fd55e41395f9c9068e752b57f41d12327f6a53dee 2c93a6a6abcc3a83b7de56f8fccefa8f2ea70a19d426854ebf539ae0c7dabd3c 101021dd90602ac7130789b4e5d56a63bf68f11c54d6543c99f94f783de2f84f b9dcacc3f10c0b047fae94171f117bf44470749b3308c930216cef78c197b352 fda548ef8f72ecbff31f7bec9a825e5dff9f9d1d98263a638d97a055cc16a88f 3a83fa984356dc0c5500e6e1b9e1b705455cbd241b596689dc1f998c6513b199 4b26fe6db5034b9cf750f06094b0797716406bf02b898e807e3815cfc1e3e8e7 a885284081a0f3b8ca61f8bd4cb8b4657d5233e2fa6a75aa581206a0ad288df1 5b61fa7852a8433240f28750c22d187067eb36c7c83de65bef2c49073952e13c fcba78e89662c17966a337732b46e5876f1ae17155bd8fcc29ec184b0db6d186 ce05a0f3f1cbdc49f628e79354b08ad98df6bdb6cb2b6d6feb517180f12a7034 d4605b4266a9b7c6506eb6b934ee9ce94930de822505825b950612e1bdc90c98 97553dff667c8851ba4b3442521f42883746c140a3d7d5903a0b27d3d8fc74a1 de2e63638072466d896a0fac908c9254680640cb5c1ef612810ba60c6b685c26 68a27bd9cd3d1146dd978dfa2e39cca09f8448645884a335f0b533a2155807d6 40274fd781a69b37b311783c6927bfeead5856804c3a96f0e6cb881f119e7511 8d2b4e1ceb9ca26c64ea508395f0b18d0e8c5e6e7f63c7522649da629f3049d8 960c45e01c2d7125203a97ec993f932b67b971b0d4f188604364e4f3c97b65f3 c48c27587fd6dc18c4e2f266a296fe502735e931b5993226e1cd0fafdc8c7343 312e5c71fd2de032f9931ba6f22230362d9bb0638abc8dc5a7bf09086e0fa14a b4de07fc8ad5f9f0f875f817f0738bd966eb0df8d563337b4156f81ccdecfe20 934e2e510ca443a8ee22cab15cfab986cee3a6c0e57698a1ed1b7840e744c93c d56af0c78a83328092803d2ce2f151a7e9766df1588f5b5b71ece5a2c306ae19 14e013b1af70fb515805bdd40967d2dfe5bbefebb8d53c65e60d16940df1aa7c 0b08064e99bd85d8203e57e28b5aa4592c26472d84f4ecedb4c51df248a2653a d6c969c84dc88d92e71c38757a8757853438e4cf378e6a926077f21ce13038be b882aa0653e686d5d11ddafc1a59981dc49ee52fce188e1e1d6d3e85ade5274c 6975675f6946fb95038028320c0e9e76c8cf65d3ba88ac37e0933435e24bc2ce 8c01cc1ba9aff55a6d455f3edafd887858612aae5349c3adf5e07630d2009cf9 2ebebfbb611c24d4c1ae625ea94de43b81edf9f55b58782491e7b225d105e70c 5745a0cef526f11b6b822102bcaa2070648a070c5845b8e6368d3622d1c854f2 7d9289fa273e84e1f1f27b5443ed84df59dbdfd5a2dada8d3ef31e26c4aeed2f 65688a45a01ce9d35371e14318579afdbf214d825e2777f23c57ac4bc88ba88a f1c2c60a5f0c9b403bdf3ca492794550dc20e7c6cb18ed72fb3637230a319986 3f58c49f7618eff5395eab6699b5c6cdd7b43caf8d86c15c721e797dcad52159 bb78e8948e9a47f36d55d662ad527ed429c1a2f971c6350a6696f07caf589124 195d548b21b45af360f9e6291c5e8d3dffd567ca0ac1dda91a6b20c2ac8c49c5 a54ccc7599c44efbdd0510308f8a70fdf8f04df8506755630c86b2b7216946b0 f80ea5dea5e10ab95fd64c2307c4e57b0c14daef75e259ee842b135fb4f143f0 775461c3dd8f700e2b816b12bd7dd1e83db00b1d74e8f0dcaf70ad1f566cb526 f20d4a8b804f6da3366d2813e638d41bd48a8a3260d956b398cc8a2fb2c5bf23 dacea5c300b6c13f108ad461aaac0473e4918e014a4a7e2d0605ce39360fcab3 a8805177ccf1ab9a7a127cde118d77e720eb2c1d06a04d131fcafee260a95841 47b944377ad3379a703e89a6086acecd650404502f6c4319a31e1dcc8b26eefa e3251c81beec3c5947fb2df8bc48b225ac66686508112aedba816abde8d189a3 381d7a141660d1a5837e5f48dbbefe1dcccbbc73005b91daa030b11d8e4c367f 724a5ea0d72644cc994a6e7a40ee5e7254e6c4ff55fad7ad5023a396c47ba522 8bfed601462cc2e7b69f3e09699d6eb384ea4ea3452092a41418bab15794fdba 383a33c5ea1d828abb2e3ea5569f200e6fd186d9dbab58a9076e65702ca31720 88e9776d4a87bbbc83d1f28373c62e8a8eb1eae1de0a13f916dd4fc0456cab5b 59c03e0f21b9afa87a82e69b890518d3c546b139063565e97110baf3ed8c0f41 5e7f51b387f21a06b6b8e11bdd6623647ff01ccef5ec91c6824b4329e5f94722 dd22ac9a5bd463d14a67ba99095e2df758c5fdfb72894986ec949188a61e1588 libfrr.so.0.0.0 libfrr_pb.so.0.0.0 libfrrcares.so.0.0.0 libfrrfpm_pb.so.0.0.0 libfrrospfapiclient.so.0.0.0 libfrrsnmp.so.0.0.0 libfrrzmq.so.0.0.0 libmlag_pb.so.0.0.0 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root frr-8.4-150500.4.26.1.src.rpm frr-devel frr-devel(x86-64)
libfrr0 libfrr_pb0 libfrrcares0 libfrrfpm_pb0 libfrrospfapiclient0 libfrrsnmp0 libfrrzmq0 libmlag_pb0 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 8.4 8.4 8.4 8.4 8.4 8.4 8.4 8.4 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 f(@f_f(@f@e@em@e?e Rd/@db d*cn9@cb3"b @aaaim@aa@aC1``@_I@___w@^z^Ӝ@^^k@^G@^"@^!^ ^ ^
@]@]@]]@\U@mt@suse.com mt@suse.com mt@suse.com cfamullaconrad@suse.com dimstar@opensuse.org mt@suse.com mt@suse.com mt@suse.com mt@suse.com mt@suse.com mt@suse.com mt@suse.com mt@suse.com dimstar@opensuse.org mt@suse.com jsegitz@suse.com linnaea@lavia.moe jsegitz@suse.com linnaea@lavia.moe jsegitz@suse.com mt@suse.com mardnh@gmx.de olaf@aepfle.de rtorreromarijnissen@suse.com mardnh@gmx.de mt@suse.com mardnh@gmx.de erico.mendonca@suse.com mardnh@gmx.de mrueckert@suse.de mardnh@gmx.de mardnh@gmx.de mardnh@gmx.de mardnh@gmx.de idonmez@suse.com mardnh@gmx.de erico.mendonca@suse.com erico.mendonca@suse.com erico.mendonca@suse.com mardnh@gmx.de mardnh@gmx.de - Apply upstream fix for crash in bgp_attr_encap that were missing
a check of the actual remaining stream length before taking the
TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16506):
- 0024-bgpd-Check-the-actual-remaining-stream-length-before.patch - Apply upstream fix solving ospfd denial of service via get_edge()
function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
gh#FRRouting/frr#16088).
[+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
bsc#1222528,gh#FRRouting/frr#16088).
[+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
gh#FRRouting/frr#16088).
[+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch] - Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
CVE-2024-27913, gh#FRRouting/frr#15431)
[+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch] - Apply upstream fix on error handling when receiving BGP Prefix
SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)
[+ 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch] - Fix build with RPM 4.19: a stray %-escape sequence was found in
the files section. - Apply upstream fix for a crash on malformed BGP UPDATE message
with an EOR, because the presence of EOR does not lead to a
treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
[+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
[+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
[+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
"flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
[+ 0018-bgpd-Flowspec-overflow-issue.patch] - Apply upstream fix for a crash due to a crafted BGP UPDATE message
(CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
[+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
[+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch] - Apply upstream fix for NULL pointer dereference due to processing
of malformed requests with no attributes in bgp_nlri_parse_flowspec
(CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
[+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch] - Removed protobuf-c BuildRequires (source package name) breaking
build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
header in an ahead-of-stream situation (CVE-2023-41360,
bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
[+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
length is zero (CVE-2023-41358,bsc#1214735,
https://github.com/FRRouting/frr/pull/14260)
[+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
attribute instead of session reset (CVE-2023-38802,bsc#1213284,
https://github.com/FRRouting/frr/pull/14290)
[+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
[+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch] - Apply upstream fix for denial of service via the bgp_capability_llgr()
function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
[+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
[+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch] - Enable pim6d providing PIMv6 support (bsc#1206234) - Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
file to vendor specific directory /usr/etc/logrotate.d and added
saving of user changed configuration files in /etc and restoring
them while an RPM update.
- Declare root as sufficient also in the pam account verification;
without vtysh use causes to log a pam frr:account warnings
(https://github.com/FRRouting/frr/pull/12308)
[+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
(https://github.com/FRRouting/frr/pull/12307)
[+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
https://github.com/FRRouting/frr/pull/12157).
[+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
[- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
- 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
- 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
- 0006-isisd-fix-10505-using-base64-encoding.patch,
- 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
- 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
* New BGP command (neighbor PEER soo) to configure SoO to prevent
routing loops and suboptimal routing on dual-homed sites.
* Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
because previously we allowed using martian next-hops when debug is
turned on.
* Implement BGP Prefix Origin Validation State Extended Community rfc8097
* Implement Route Leak Prevention and Detection Using Roles in UPDATE
and OPEN Messages rfc9234
* BMP L3VPN support
* PIMv6 support
* MLD support
* New command to enable using reserved IPv4 ranges as normal addresses
for BGP next-hops, interface addresses, etc.
* As usual, lots of bugs and memory leaks were fixed \m/
such as a fix for a possible use-after-free due to a race
condition related to bgp_notify_send_with_data() and
bgp_process_packet() in bgp_packet.c. This could lead to
Remote Code Execution or Information Disclosure by sending
crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
* Notification Message support for BGP Graceful Restart
* BGP Cease Notification Subcode For BFD
* Send Hold Timer for BGP
* RFC5424 syslog support
* PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
* BGP Long-lived graceful restart capability
* BGP Extended Optional Parameters Length for BGP OPEN Message
* BGP Extended BGP Administrative Shutdown Communication
* IS-IS Link State Traffic Engineering support
* OSPFv3 Support for NSSA Type-7 address ranges
* PBR VLAN actions support - Apply upstream fix for out-of-bounds read in the BGP daemon
that may lead to information disclosure or denial of service
(bsc#1202023,CVE-2022-37032)
[+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
[+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch] - Make build a bit cheaper: do only BuildRequire the primary python
interpreter and its modules (python3-FOO) instead of all
available versions as done using %{python_module FOO} - Apply fix for a buffer overflow in isisd due to the use of strdup
with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
[+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
the input packet length (bsc#1196505,CVE-2022-26125) with workaround
for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
[+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
the input packet length in the packet_examin and subtlv parsing
(bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
[+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
on the input packet length (bsc#1196503,CVE-2022-26127)
[+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch] - Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400). - Update to version 8.1
* Graceful Restart for OSPFv2 and OSPFv3
* OSPFv3 NSSA and NSSA-TSA support
* OSPFv3 ASBR Summarisation Support
* BGP SRv6 and Prefix-SID Type 5 improvements
* BGP EVPN type-5 gateway IP overlay Index
* Lua hook support
* See: https://frrouting.org/release/8.1/ - Drop ProtectClock hardening, can cause issues if other device acceess is needed - Update to version 8.0.1
* refreshed patch:
- 0001-disable-zmq-test.patch
- harden_frr.service.patch
* LDP gained SNMP support
* OSPFv3 gained VRF support
* EVPN Multihoming is now fully supported
* TI-LFA implemented in IS-IS and OSPS
* New Segment Routing daemon
* See: https://frrouting.org/release/8.0/
and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_frr.service.patch - Use skip, not xfail in 0001-disable-zmq-test.patch to disable
zmq test as it is not expected to fail but hangs (bsc#1180217) - Update to version 7.5.1
* Maintenance release
See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in - Requires libyang 1.0.184 - Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
[+ 0001-disable-zmq-test.patch] - Update to version 7.5
* Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default - add build condition disabling mininet build require by default,
needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list - Update to version 7.4
* Upstream does not provide a changelog
- Drop patch (fixed upstream):
* 0001-build-use-configfile-mode-in-init-script.patch - 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658). - Update to version 7.3.1
Bugfix/maintenance release
* Upstream does not provide a changelog - enable verbose make rules
- enable grpc support. new subpackage libfrrgrpc_pb0, new BR:
pkgconfig(grpc)
- enable config rollbacks. new BR: pkgconfig(sqlite3)
- enable realms support
- enable shell access
- make sure we use system openssl
- fix shebang line of the frr-reload.py and
generate_support_bundle.py script so we dont pull python2
- do not delete users and groups.
- add Requires for libyang-extentions - Update to version 7.3
* Upstream does not provide a changelog this time
- Remove patch:
* fix_tests.patch (not longer needed) - Update to version 7.2.1:
BGPd
* Fix Addpath issue
* Do not apply eBGP policy for iBGP peers
* Show ip and fqdn in json output for show [ip] bgp json
* Fix large route-distinguisher's format
* Fix no bgp listen range ... configuration command
* Autocomplete neighbor for clear bgp
* Reflect the distance in RIB when it is changed for an
arbitrary afi/safi
* Notify "Peer De-configured" after entering 'no neighbor cmd
* Fix per afi/safi addpath peer counting
* Rework BGP dampening to be per AFI/SAFI
* Do not send next-hop as :: in MP_REACH_NLRI if no link-local
exists
* Override peer's TTL only if peer-group is configured with TTL
* Remove error message for unkown afi/safi combination
* Keep the session down if maximum-prefix is reached
OSPFd
* Fix BFD down not tearing down OSPF adjacency for
point-to-point net
BFDd
* Fix multiple VRF handling
* VRF security improvement
PIMd
* Fix rp crash
NHRPd
* Make sure no ip nhrp map works as expected
LDPd
* Add missing sanity check in the parsing of label messages
Zebra
* Use correct state when installing evpn macs
* Capture dplane plugin flags
lib
* Fix interface config when vrf changes
* Fix Interface Infinite Loop Walk (for special interfaces such
as bond)
Others
* Rename man pages (to avoid conflicts with other packages)
* Various other fixes for code cleanup and memory leaks - Fix license tag - Build with support for pcre, protobuf, rpki and zeromq by default - Cleanup spec file - Fix build-time dependencies
- Remove superflous comments - fix_tests.patch: correct syntax for Python 3 imports in tests.
- Enabling tests - Update to version frr7.2:
* zebra: use correct state when installing evpn macs
* lib: set entry to xpath in if_update_to_new_vrf
* zebra: capture dplane plugin flags
* bgpd: Autocomplete neighbor for clear bgp
* ospfd,eigrpd: don't take address of packed struct member
* bgpd: Prevent crash in bgp_table_range_lookup
* bgpd: Fix memory leak in json output of show commands
* tests: Test if `distance bgp (1-255) (1-255) (1-255)` works
* bgpd: Reflect the distance in RIB when it is changed for an arbitrary afi/safi
* bfdd: fix multiple VRF handling - Updating to version 7.2
- Adding systemd scripts
- Fixing build and permission issues - Update to version 7.0.1 - Initial package, version 6.0.2 h01-ch3a 1724402618
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ 8.4-150500.4.26.1 8.4-150500.4.26.1 frr agg_table.h assert.h atomlist.h base64.h bfd.h bfdd bfddp_packet.h bitfield.h buffer.h checksum.h command.h command_graph.h command_match.h compiler.h cspf.h csv.h db.h debug.h defaults.h distribute.h eigrpd eigrp_dump.h eigrp_topology.h eigrpd.h ferr.h filter.h freebsd-queue.h frr_pthread.h frr_zmq.h frratomic.h frrcu.h frrlua.h frrscript.h frrstr.h getopt.h graph.h hash.h hook.h iana_afi.h id_alloc.h if.h if_rmap.h imsg.h ipaddr.h jhash.h json.h keychain.h ldp_sync.h lib_errors.h lib_vty.h libfrr.h libfrr_trace.h libospf.h link_state.h linklist.h log.h log_vty.h md5.h memory.h mlag.h module.h monotime.h mpls.h network.h nexthop.h nexthop_group.h nexthop_group_private.h northbound.h northbound_cli.h northbound_db.h ns.h openbsd-queue.h openbsd-tree.h ospfapi ospf_apiclient.h ospfd ospf_api.h ospf_asbr.h ospf_dump.h ospf_dump_api.h ospf_ism.h ospf_lsa.h ospf_lsdb.h ospf_nsm.h ospf_opaque.h ospfd.h pbr.h plist.h prefix.h printfrr.h privs.h ptm_lib.h pullwr.h pw.h qobj.h queue.h resolver.h ringbuf.h route_opaque.h route_types.h routemap.h routing_nb.h sbuf.h seqlock.h sha256.h sigevent.h skiplist.h smux.h sockopt.h sockunion.h spf_backoff.h srcdest_table.h srte.h srv6.h stream.h systemd.h table.h termtable.h thread.h trace.h typerb.h typesafe.h vector.h version.h vlan.h vrf.h vrf_int.h vty.h vxlan.h wheel.h workqueue.h xref.h yang.h yang_translator.h yang_wrappers.h zclient.h zebra.h zlog.h zlog_5424.h zlog_live.h zlog_targets.h libfrr.so libfrr_pb.so libfrrcares.so libfrrfpm_pb.so libfrrospfapiclient.so libfrrsnmp.so libfrrzmq.so libmlag_pb.so /usr/include/ /usr/include/frr/ /usr/include/frr/bfdd/ /usr/include/frr/eigrpd/ /usr/include/frr/ospfapi/ /usr/include/frr/ospfd/ /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:35334/SUSE_SLE-15-SP5_Update/c91f298d2f1f7a3c1ef1cf88369f53c3-frr.SUSE_SLE-15-SP5_Update drpm xz 5 x86_64-suse-linux directory C source, ASCII text C source, UTF-8 Unicode text C source, ASCII text, with very long lines O+^ H /l utf-8 71ace2e22e0b38ba75bac6f7fbd7ffaa3ccef6e79c2f3c7ce008f44ec723cf12 ? P 7zXZ
! t/E] "k%{Huuy:?$
h 5(P2t4*ڜmo64~ #QËv"Fwp<]gT
D0Jb冗cyr.I lA&y _WlDSA-&Tx)4CO9d|jQV" >i-(7U HvD9nE5@D6LKn7vLͿ syM*o7GA=7'iƬ}҂ M~Yv_ ' m.3* ΰG0"D/v5M&OfRKs 98%14/'a#.J5 j]s ñRZ9.Rxw^iZpOp:Ft֍1 Kg#߀DFexH*?L%3/%o`b 2R+u tݡ
C l W ځ]s1S_SL.P[b]#:HOh{Ppi& 0M0PSʵEUZ^JX*O sv|Ajnz5*즨Vci 0y s§@9y ,~oCa̭#·P{2?걺XCP\ _ oQ&h,u5dd!Jr2grIҵЄ]J2P4veT
VKl )0 "R87]EµSpS2ۉSuL f
k 7^>)c-J268/7 MLqt~^#])2qDv
!&WB #LcL"yUVPD?c
ZX b
E;O)bRA
ϖc
TWH?tY˒:W5蘶LX YM+SX4̯zhn Z*Μ'.`9mRB;=TD)
#C!밍F\زcX} 0XTbRu|CIG9;V b=ގ"XmDfq*MςMrzuj+vy֒: .e!6JgV7 ܶo !;Z@
*
YZ