<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="39">
<package pkgid="25bdbfe95cbc442650ba6bb6c5febb206d487e507030ce5cf3fe2a564a02b03a" name="frr" arch="src">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="1d02280f3a8151d7456d732efd101cdb4a5cef335c3d51e80bb463b645810776" name="frr" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="d59adbb2e93ceb95451e0e60d48cced10b09a077154c8de7307c44f37f1d1598" name="frr-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="364aa886cf5e48ff25f63bb79d324d238a898c4cd47680bc20c5842a245e7ee9" name="frr-debugsource" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="3cb4ad84752da3e6aba2348d5f8d11389acde867ba7d8820d4a029785ccdba23" name="frr-devel" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="971a391c1b50c67a4abda4dd567b3ebf1deb0c63b04c15bbf278ce0d5eb5a459" name="libfrr0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="ab601328ad1d8873b9ad9d84a102bef3aa9931470347bd4674b43c5012889775" name="libfrr0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="b72abcfaa1f693401fa2ae162fdd1407fbbec8bd3cd9ad192baadaa0776ba9f2" name="libfrr_pb0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="4f4fee0151cf079e6b6e53f849b76c599ea60d327185f8c58691e2885971fbb3" name="libfrr_pb0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="9486b65e7d5023c1400f73ec8e5b019794df4fbc3c1a102a883375629333053a" name="libfrrcares0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="ffded14f955de72fe250a96d00cb32d8830cea3bbfe3590a0a3ea94ec63187c3" name="libfrrcares0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="8414bef138893e9c8319d91d230cc786307cb711e5f4c56a2a5a346365656f1e" name="libfrrfpm_pb0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="03e41a49c024500b92338c14493d6673d44a1eade415d89c86c24068f31b439b" name="libfrrfpm_pb0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="a0e50c626ccd8b3b4df09d354320c252f3ec044a286a785e631f3a7cea0ac6b6" name="libfrrospfapiclient0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="35590fb22523c14cc8ac6cbd8d53de81b97c29ebc011ae58e945c81c82039118" name="libfrrospfapiclient0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="e1545b1ec7e973186ad87f57fd7b1404922ad86b37a6a5108db430d5e0ab64b3" name="libfrrsnmp0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="d545cf9a0eea421a0e5b71f91d8f9d110b8ef1cd1020e0d14b9f200c8fa8893e" name="libfrrsnmp0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="066c1960348d24b7c4ca6ce61b8bb2410ff6eee4b3c7704648d32365c591dcce" name="libfrrzmq0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="a2295b1b18a215e7891a6d891c934a113c6138da76f538a3aec78afe097e84f2" name="libfrrzmq0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="3bec371e72afb4c8b7bb1727d990e2e8d1534780cbde3b9a85b6739e3cd48387" name="libmgmt_be_nb0" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="7c560463b116c33a334a2baed852b26452db279b8425c5d079ab6990740e3166" name="libmgmt_be_nb0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="150300.124.2"/>
  <changelog author="schubi@suse.com" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
  <changelog author="mt@suse.com" date="1693396800">- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]</changelog>
  <changelog author="mt@suse.com" date="1694520000">- Apply upstream fix for NULL pointer dereference due to processing
  of malformed requests with no attributes in bgp_nlri_parse_flowspec
  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]</changelog>
  <changelog author="mt@suse.com" date="1698667200">- Apply upstream fix for a crash due to a crafted BGP UPDATE message
  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
- Apply upstream fix for a crash due to mishandled malformed
  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]</changelog>
  <changelog author="mt@suse.com" date="1701691200">- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,bsc#1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1706875200">- Fix build with RPM 4.19: a stray %-escape sequence was found in
  the files section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
</package>
<package pkgid="42ed878db1fc7a2e31b6298dfbaf2393a8b33d2ed7d7c0165e52de02f5f8a0e7" name="librtr0" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="12aeac3c8a5256a2b957138eaa10015fdbeffc4c3a7fd5895eb9381c4f85ab83" name="librtr0-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="2e0ff609ed7e14cdb523ca397c73e686ac2696d5d3bc093eaf80a07d4214d79f" name="libyang" arch="src">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="c0eeeb7cb076c459850e2b28896ae2fa53577d1e9d97e9681dc204b6a01f35d2" name="libyang-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="3154faa1f9f2954570d71c79455fed036e4e16f73ce9062889c19d7f0099f136" name="libyang-debugsource" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="26c9bbcf338b52d7c690783ce285c20645c0cffc5348c786530b2587f5f487b2" name="libyang-devel" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="8d7dac132d88852552118203461f3a325aab5845f0a1f8563ee5f2eedb3a3527" name="libyang-doc" arch="noarch">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="27fabbbe092f2abd8191958c73ab0d2749f173468a1717417f45d09ca2de12b5" name="libyang3" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="c2c06845a234e586e3c65fbf997686f77db93a9e3385bd8217a5492701a65d39" name="libyang3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="b26990dce100c3e6679ead435fa441443b995f633b9d377f62cda6e7c63331f3" name="rtr-tools" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="336f5cedc4ed9e2815981e1f2427b9913bdb28f6cb55ed943f46b1a43ff3ec2d" name="rtr-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="28b6d0c1b371801d02e54fd84853f48905d8322047455b573e06441ac833db26" name="rtrlib" arch="src">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="e90ce9c7abd45aebce7e2755e8647405919593f22cd87853f069591fb8ba8f58" name="rtrlib-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="c1952a53ee4d85dcf603d4512bca8f987b3ea7276d6d02cc53399b2317cb55e0" name="rtrlib-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="a8aa4a52947a7812b20bdb798619719cb3b404366cbc9e8b153fa9bca847aa70" name="rtrlib-devel" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="ebcc69befdb4d5720b22d60768f9190494e67768fbc8f81e7a2acb11c0e93349" name="rtrlib-devel-doc" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="150300.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="4c68b1b7110b263d6e6d2240a2a332c62504a3afc823d221a9e625ff23ab6a8f" name="yang-tools" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
<package pkgid="a1e0076c94096634570324a47ace9492abc342ae41ef0a491ab3434b0627b663" name="yang-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150300.5.1"/>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="pgajdos@suse.com" date="1779883200">- added patches
  CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes [bsc#1266316]
  * libyang-CVE-2026-41401.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779883201">- added patches
  CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob [bsc#1265330]
  * libyang-CVE-2026-44673.patch</changelog>
</package>
</otherdata>