<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="145">
<package pkgid="dfa89eccb1bc80a79b49237881150860974a17bc533e68c7b9539abf85ed5186" name="frr" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="96f94fedba05d592bd31ca1824d01bbdd78a7e030bcf3edf1043a82054f58406" name="frr" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="77be059b3ac2a58d01b8c1a6a731c063778741a0680406596707a9267df92a55" name="frr" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="9579018e05904ef93db373a9fc4908f71511781d9c4233aadcac4aa3037031c0" name="frr" arch="src">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="3eab8ca2eca0d76f5cdb89060da1ebea1e02f104cc202ca1538ba58df81f3dd8" name="frr" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="32255563a99dc883df995c35d1e0a7b2c9b503ed80379ecb76036a966ad534d6" name="frr-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="2193a46f35a509e7a9518ed553cc8b4860782bc85043779169289c364176f070" name="frr-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="661a9615bd3513d8da273e7a380fe742ebd2cba08d0df036f93ba86148aab6de" name="frr-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="a49d209da0e6a4b80e7f14eca8cbc2cd60030bbcdeecb6f560f99061f7990c5e" name="frr-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="c456ee798921b81dca47198fa086fd92f566ff2b70a60e3a723d81e904933b4a" name="frr-devel" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="4965b0a37e75134a91d214bd78c01db8f25ad5f5bb3c0db38d16c01ba71154ba" name="frr-devel" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="3fef3bd60cf8e3951a22970930faa72f960590975d402ff2d172633845fe370f" name="frr-devel" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="7f4ef6f7a2d7d3d5132976fdcfce140c21211bad2e78620c43094b8aa6aa97cb" name="frr-devel" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="61a7c5587d3dd816eab02a027082f02f55350c4c6690540f539616d4a0edc268" name="libfrr0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="1ff167c80961dca31f6d1f45f1857e2d8bebfb963c86bf3dd1b2d38208101840" name="libfrr0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="2f77b7ba873f6188f66810406145f96a5165c85b18830b4b86fd5cb80b011ee6" name="libfrr0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="adf8de1600a59084bc86999891185af1926aaf2022a3a742f1300149c853c512" name="libfrr0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="bc059ee60f0dab5fa7a3b963d3e8d4cd63eb5be6225ce1f7816d4269efbeb2cc" name="libfrr0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="409d7b168b5f978d7b20bc02077ef622b818ff9e400e637281d737f9cacf1610" name="libfrr0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="61a767c2fb0ce8ba9aa31493b0b75bcd901274f95241d413ded0a5fb812347b4" name="libfrr0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="56a9cddedf708fa62bbfae8c9139ecc5babaf72af0d589c33a3fa1e5cc66bebf" name="libfrr0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="c986d00efaf8b46569cffd71339f3408716ef945ed5b32acd879dce1c9e28544" name="libfrr_pb0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="bc590178fae3eb106a840d335489c88456ad4dbd74c81490a4ac2276cd0d8e47" name="libfrr_pb0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="526cdd323de589d5d27dbfcf7b08512862a398b879437915273e7b96f80e58b4" name="libfrr_pb0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="fca5d4dd4115946dbb2c996e5bf475856df54ed24e922680bfb73a6dbff2a3f3" name="libfrr_pb0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="b390fb2e44412bb6c4b1d3c750adfdc2d48a304485b775ab94a40f1c0a8ca650" name="libfrr_pb0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="81051b4e6db3c621ff3eda02408d933272f8ab5777af92f03c0531e8e04e5f17" name="libfrr_pb0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="044c69ca59f069b90eb240431ac26abb4943a4dde0a76088506edbe3ed8eabc8" name="libfrr_pb0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="434dec15ac2d5384729c127e822c125c5f53725a387afa2f344fdd6ee8b58144" name="libfrr_pb0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="e2c156d824a1e39c4f6c4d4b1642c4ed4ea81516e131c96441fc7669046df29c" name="libfrrcares0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="d82e9fc354cd993afc3731302bba81342baea5a4a69f07377c09805cbc33ee1c" name="libfrrcares0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="8990ecbb5d9581e50ca6356ea1266229e54203a248ef33bbf70422b82059fee6" name="libfrrcares0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="1d81c1f2afed4530d6741ab9effe194410878162fca7c3a98d566785ce5afedf" name="libfrrcares0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="5e7ba32db0507c72dfbb8c6511546b4f70c3861cb9e6924dc2413112d8054c19" name="libfrrcares0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="9731e64b5f242417173a9ab2c93d63e834769e589339ff07661620e60d057a28" name="libfrrcares0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="fd8a8676eb858ab530da24456f1140f3734258385954a9077bbc5aa294d88656" name="libfrrcares0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="5858023a967baba2175b0e926a04ca98c8836337370fa1f0d6c14276524602c7" name="libfrrcares0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="1868910ead32cb83ad00e18a9b37268221d64899dc28348513129ad7ac272e52" name="libfrrfpm_pb0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="c5caa502b9446fe205e275be370f1dd0146096c2c4a5dd2eeb26f20fc672262b" name="libfrrfpm_pb0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="563ec8d4729100a8934cae1f75522bd8f25fe8581254f6105015cf1c72b40944" name="libfrrfpm_pb0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="bd0693ebb8d32fff5537841001992cf200238e04a5cd7d738dc78b6205e588ae" name="libfrrfpm_pb0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="a1b8866c3166860d7943990830781ed19358690a748077f928c1c638c0f5c27e" name="libfrrfpm_pb0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="b539355afd8f6a32de546cca2148453f576cd8302c6c52ee7b19332b0e1ea94c" name="libfrrfpm_pb0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="ab2929be894577e6c496a91cb729cd53d36a172b4e69580d15cb23ff794b43ed" name="libfrrfpm_pb0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="baa0f5ab03caeda15c8850331675904c0adc1434c463d249e5bda5bf71543ba9" name="libfrrfpm_pb0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="830efe73f924ea45e67422c52a6b1b80fa3f5377dae231363c22409ae9f8e95d" name="libfrrospfapiclient0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="9f5149e95431f5c8db8b69cd52c9eed9c1788ee1b4bd46654e237925817dfcc7" name="libfrrospfapiclient0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="ee0857e2ef7346fa0728c43ec7a11628e1d89f86fb41135768652b63f5d437f5" name="libfrrospfapiclient0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="1165361dceff51f5964f515f6f717b659c17423c0fdf580cabccf65ae7e84aaa" name="libfrrospfapiclient0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="e2f74ec390772e613e56bfb999d945e42174f8629fe0a22a98f0ebf3cae05683" name="libfrrospfapiclient0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="97c35f583a3cece523e18c03a15b5e1545b360880e2c19d7d56c0e86f1542364" name="libfrrospfapiclient0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="c91fd80b3c3ae9c07e3dd9f219e126f06f43fb486465d50a5fbac28b2ef44ee1" name="libfrrospfapiclient0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="63ddd204e5dd16c60d9c0673fb87183ca5b403c689421987ae306870b3e6a74b" name="libfrrospfapiclient0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="58104b72f92defbda30660ea9be9c151f1d1619ea733a6aec3d42ab547527a5b" name="libfrrsnmp0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="9745c83f97c3286320ce8779b6deeff1b79f1595317ca9e96e46cf80822668cf" name="libfrrsnmp0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="130e5ae610e39def4119ce8ced878d6186a7e4a0c0c6575d57fe5981091f15c6" name="libfrrsnmp0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="fa1e0219745458ecc2c3ad2757d34f0a6e77add2d6f726dbe070b0167c49c76f" name="libfrrsnmp0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="cbdc5047cb805fa0764ba55daf79b447660ca2ef56489fd36f26aedfca6dcad5" name="libfrrsnmp0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="fa6e28c32fcdc12322c2740d8f458093b9bf1286385cc0590cd3c286c874cd89" name="libfrrsnmp0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="5ee72066e91a5ee5e31dc9d1d4bb6c4e9ed8587eee15f2e0c1cbac99d5ca9599" name="libfrrsnmp0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="4e154251e7e49e4dc50b28375241b2f1bc1e383ae7706191f8137d22808f2a0c" name="libfrrsnmp0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="454b6e39f8da6258fd67bb8b65f3448bae34a3e4ac6550379b353d0d45b7e87c" name="libfrrzmq0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="7b8e2e2696501558064994d78710a65bede3bb6ce2d32ed88c5f4a89475ec51e" name="libfrrzmq0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="dab4e90120ff312e29983e08eab2dc972b339b6571ddc0a1194d4ea237177feb" name="libfrrzmq0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="0c08222e359a706d823a0df226d5aacc46c775b3f709c345443a5ce79af94f74" name="libfrrzmq0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="8b394963c4be58a09d1da1297628c79aa99b73f0ac4cb98538c3353f3d87597c" name="libfrrzmq0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="df4e535c40317555702d188ca94bd221fe1ba542df3bfee94aab66165d4ad76f" name="libfrrzmq0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="e140407b8fba6353ab98400957911a9ef12f2dfca9cb7612aa308740576c254e" name="libfrrzmq0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="ad7a6952b47e2889ab0afc80247ed6df21fc026d88ad29bc9ccf34ca9b1a594d" name="libfrrzmq0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="6ef7c5e1e17ee1f0519c53dcf95558ddfbca300311475ce8bb4ad9664754f62d" name="libmgmt_be_nb0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="ea936c789136977cd224ecce6600d020a2a943af3c5905491a587268240fb9b1" name="libmgmt_be_nb0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="951cdac07c0c534a9892f75f4e2a5af0fdcd65c03e88d303c4fc67f40f3d0e70" name="libmgmt_be_nb0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="571414f21b4dcade921e05d475eee9d1acd6157cbe304f1ae3f71448c66110c1" name="libmgmt_be_nb0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="e8006031818cefecf4998b07239dbfc848415f924dc1a6f9c3cb78e02f60d9ca" name="libmgmt_be_nb0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="3d7b9ee7a953e8aecef3195bfe48d9b947f347962187daed961c199b869d0a77" name="libmgmt_be_nb0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="70b320710c08fd26bc8bc35ae3e7f7ac40a4e01d2c3002915639e1a82fe11aad" name="libmgmt_be_nb0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="49bd6ec509987a4a071a82f951c757a9bb84786b5c30fb20832cf5a2866c3cbf" name="libmgmt_be_nb0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="65c474feaea7ddcc84b723502f6f34d79736d2a3265820eaedb72c042707fb65" name="libmlag_pb0" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="9652444c06bfc445a40a0f1c98bdd71b9d0421fc234b807f5e937be79e2810d9" name="libmlag_pb0" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="8641dbe32ff6e586d762dbea0b92fee93c8cee32eee7c793a98f61a5174e9298" name="libmlag_pb0" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="98a963180348d4689bbf519e4442b6a5aebce5d1c3847e2ada1f4db1a8ec2223" name="libmlag_pb0" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="f391f7367cda707c504a656ed68635fce72b5b03320e19def4a0b4b25ac5b9fa" name="libmlag_pb0-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="0468f197b6b26dd7a1e7e590401d9422674728bcb8aadf316a75c69bad3c3db6" name="libmlag_pb0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="5617cbdd728ee05fd98b191d2d49e74e84bb9846b5a5f72f906098123667206b" name="libmlag_pb0-debuginfo" arch="s390x">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="f65c7cd006cae92bcc71bed9fd0ccd9cc99736581fc991e5a4fb7d2d71b5f5a1" name="libmlag_pb0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.6.1" rel="150600.142.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1712750400">- add
  0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch:
  * Apply upstream fix on error handling when receiving BGP Prefix
    SID attribute (bsc#1222518,CVE-2024-31948,gh#FRRouting/frr#15628)</changelog>
  <changelog author="mt@suse.com" date="1713960000">- Apply upstream fix solving crash in OSPF TE parsing (bsc#1220548,
  CVE-2024-27913, gh#FRRouting/frr#15431)
  [+ 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch]</changelog>
  <changelog author="mt@suse.com" date="1717502400">- Apply upstream fix solving ospfd denial of service via get_edge()
  function returning a NULL pointer (CVE-2024-34088,bsc#1223786,
  gh#FRRouting/frr#16088).
  [+ 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in ospf_te_parse_ext_link for OSPF LSA packets during an attempt
  to read Segment Routing Adjacency SID subTLVs (CVE-2024-31951,
  bsc#1222528,gh#FRRouting/frr#16088).
  [+ 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch]
- Apply upstream fix solving ospfd buffer overflow and daemon crash
  in RI parsing with OSPF TE (CVE-2024-31950,bsc#1222526,
  gh#FRRouting/frr#16088).
  [+ 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch]</changelog>
  <changelog author="erico.mendonca@suse.com" date="1722168000">- Update to version 10.0.1 from official sources.
  See https://frrouting.org/release/10.0.1/
- Clean slate: removing all previous patches.
- The following patches were obsoleted:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  - 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch
  - 0004-tools-remove-backslash-from-declare-check-regex.patch
  - 0005-root-ok-in-account-frr.pam.patch
  - 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
  - 0007-bgpd-Ensure-stream-received-has-enough-data.patch
  - 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
  - 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
  - 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
  - 0011-babeld-fix-11808-to-avoid-infinite-loops.patch
  - 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
  - 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
  - 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
  - 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
  - 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
  - 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
  - 0018-bgpd-Flowspec-overflow-issue.patch
  - 0019-bgpd-fix-error-handling-when-receiving-BGP-Prefix-SID-attribute.patch
  - 0020-ospfd-Solved-crash-in-OSPF-TE-parsing.patch
  - 0021-ospfd-Solved-crash-in-RI-parsing-with-OSPF-TE.patch
  - 0022-ospfd-Correct-Opaque-LSA-Extended-parser.patch
  - 0023-ospfd-protect-call-to-get_edge-in-ospf_te.c.patch</changelog>
  <changelog author="erico.mendonca@suse.com" date="1723204800">- Fixing Source URL/archive name.</changelog>
  <changelog author="mt@suse.com" date="1724328000">- Apply upstream fix for crash in bgp_attr_encap that were missing
  a check of the actual remaining stream length before taking the
  TLV value (CVE-2024-44070,bsc#1229438,gh#FRRouting/frr#16502):
  + 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch
- Re-added 0001-disable-zmq-test.patch to avoid (sporadic or arch
  specific, e.g. aarch64) "make check" test failures (bsc#1180217).
  + 0001-disable-zmq-test.patch
- Re-added hardening patch for systemd service(s) (bsc#1181400):
  + harden_frr.service.patch
- Cleanup unknown --enable-systemd and correct the --sysconfdir
  and --localstatedir configure options to not end in …/frr.</changelog>
  <changelog author="mt@suse.com" date="1726488000">- fixed bug/pull request references in frr.changes file</changelog>
  <changelog author="mt@suse.com" date="1726488001">- add release notes url to 10.0.1 update</changelog>
  <changelog author="mt@suse.com" date="1727697600">- Update to frr 10.0.2 release providing fix for CVE-2024-44070
  and other issues, see https://frrouting.org/release/10.0.2/
- Removed patch included in the sources:
  [- 0002-bgpd-Check-the-actual-remaining-stream-length-before.patch]</changelog>
  <changelog author="mt@suse.com" date="1736424000">- Update to frr 10.2.1 release providing fix for a Denial of Service
  scenario due to RIB revalidation (CVE-2024-55553,bsc#1235237) and
  other fixes, see https://frrouting.org/release/10.2.1/
  The 10.2 version provides new features and many enhancements, see
  https://frrouting.org/release/10.2/
- Add new fpm_listener daemon binary to rpm file lists.
- Remove --localstatedir configure parameter causing to use /run/lib
  instead of /var/lib prefix for the northbound databases and added
  the /var/lib/frr directory to the rpm file list.
- Adjust to set permissions in rpm attr macros (rpmlint suggestion)
  and use frr_group instead of frr_user in group parameter.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742558400">- build with pcre2</changelog>
  <changelog author="mt@suse.com" date="1759233600">- Drop rcfrr service symlink (jsc#PED-266)
- Change to sysuser-tools and macros to create user+groups
- rpmlint: add su option to logrotate file definitions
- rpmlint: use python3_fix_shebang_path to adjust interpreter</changelog>
  <changelog author="erico.mendonca@suse.com" date="1759492800">- Adding updated copyright notice
- 0002-frr-logrotate.patch: rotating logfiles under the frr user</changelog>
  <changelog author="mt@suse.com" date="1770897600">- Apply upstream ospfd NULL Pointer Dereference fixes.
  The vulnerability allowed attackers to cause a Denial of Service
  (DoS) via crafted OSPF packets
  (bsc#1252838,bsc#1252829,bsc#1252833,bsc#1252835,bsc#1252810,
  bsc#1252811,bsc#1252761,bsc#1252812,bsc#1252813,CVE-2025-61099,
  CVE-2025-61100,CVE-2025-61101,CVE-2025-61102,CVE-2025-61103,
  CVE-2025-61104,CVE-2025-61105,CVE-2025-61106,CVE-2025-61107,
  https://github.com/FRRouting/frr/pull/19983)
  [+ 0003-ospfd-NULL-Pointer-Dereference-fixes.patch]
- Add -Wno-error=declaration-after-statement to avoid C90 errors;
  frr requires C11 compiler with atomic support and sets -std=gnu11</changelog>
  <changelog author="mt@suse.com" date="1770984000">- Switch to logrotate config correcting log file empty issue
  (gh#FRRouting/frr/issues/15818) depending if syslog or file
  logging is used in the frr.conf.
- Fix /var/run leftovers in logrotate config and service file,
  create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
- Adjust rpm requires for service macros and log rotation (lsof).</changelog>
  <changelog author="erico.mendonca@suse.com" date="1771070400">- Bumping version to 10.5.1.
- new module: PIM MLAG Active-Active support (mlab_pb0)
- removed module: zebra_irdp (replaced by dpdk)
- bgpd
  - Allow proper shutdown of bgp dynamic peers in rare case
  - Check length for dynamic capability (software version new encoding)
  - Correction in json output structure for no data case
  - Fix labeled unicast inbound policy lookup
  - Fix labeled-unicast output
  - Fix maximum-prefix session recovery for peers and peer-groups
  - Fix memory leak in bgp nhc tlv processing
  - Fix route node lock leak in nht resolved prefix marking
  - Fix srv6-only command defaulted when 'no segment-routing ipv6'
  - Send route-refresh and/or trigger soft reconfig on enforce-first-as
  - Try to handle software version capability with the new encoding format
- isisd
  - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
- pimd
  - Add pim_debug_pim_reg protection for pim register stop debug message
  - Crash while trying mroute_read when fd=-1
  - Df election on zebra peer down synced to the mlag peer
  - Fix for mc frame loss in a sequential traffic test
  - Fix pim mlag update peer zebra status upon local mlag connection restoration
  - Fix warnings for pimd
  - Crash when pimreg interface not present
  - Crashed because of indexing invalid index in an array
  - Prevent crash on interface removal
- vrrpd
  - vrrp interface delete fails to free connected route
- zebrad
  - Fix crash due to lack of control of received number of srv6 sid from netlink</changelog>
  <changelog author="mt@suse.com" date="1772712000">- Add a factorydir build conditional to install the /etc/frr files in
  the /usr/share/factory and copy/link this initial/default config via
  tmpfiles.conf, enabled for suse versions &gt; 16.0 (jsc#PED-14796).
- Create the tmpfiles.conf in the spec file instead to sed rpm source.
- Move creation of config files from rpm install to the build section.
- Improve to use 0751 permissions for the /etc/frr directory to avoid
  permission denied warning for vtysh.conf in vtysh started as user.
- Change to frr.conf to use log syslog (journal) by default
- Do not install obsolete/unused system-v script and manual page
- Fix (include) file listed twice rpm warning in frr-devel package.</changelog>
  <changelog author="mt@suse.com" date="1776340800">- Apply security fix for bgpd EVPN and ENCAP/VNC packet parsing.
  The vulnerability may have led to improper access controls
  (CVE-2026-5107,bsc#1261013,gh#FRRouting/frr#21098).
  [+ 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch]</changelog>
  <changelog author="mt@suse.com" date="1777291200">- Update to frr-10.6.0 which brings a long list of enhancements and
  fixes, see release notes in https://frrouting.org/release/10.6.0/
  - New Features Highlight:
  - LTTng traces for BFD
  - Extended weights for the next-hop
  - BGP ECMP by using Underlay Weights
  - BGP ECMP by using Next-next nodes (Next-hop dependent characteristic) count
  - BGP software version capability encoding changes
  - BGP SRv6 unicast at the global (default) VRF
  - BGP IPv6 VTEP support
  - BGP multiple labels support for labeled unicast
  - BGP graceful restart for EVPN
  - Implement forwarding-address-self command for OSPFv2
  - PIM/PIMv6 filter support for IGMP/MLD joins
  - libyang3 changes (libyang3 used upstream by default)
- Removed obsolete patches included in the 10.6.0 release:
  - 0003-ospfd-NULL-Pointer-Dereference-fixes.patch
  - 0004-bgpd-improve-packet-parsing-for-EVPN-and-ENCAP-VNC.patch</changelog>
  <changelog author="mt@suse.com" date="1778241600">- Update to frr-10.6.1 (https://frrouting.org/release/10.6.1/)
  providing several bug fixes. Already the previous update to
  frr-10.6.0 includes security fixes for the following Denial
  of Service (DoS) vulnerabilities:
  - ospfd: harden TE/SR TLV iteration against malformed lengths
    (bsc#1263859,CVE-2026-28532,gh#FRRouting/frr#21002)
  - bgpd: fix off-by-one error in FlowSpec operator array bounds check
    (bsc#1263863,CVE-2026-37457,gh#FRRouting/frr#21054)
  - bgpd: Validate MP_REACH_NLRI attribute against incorrect next-hop
    (bsc#1263974,CVE-2026-37458,gh#FRRouting/frr#21075)
  - bgpd: Check if the NHC length is enough to fill TLV value + TLV header
    (bsc#1264051,CVE-2026-37459,gh#FRRouting/frr#21074)</changelog>
</package>
<package pkgid="fbafca18a124a753b2c6083f4341d7ecfb8bda2a74e3bc886ccffcc61316b3a1" name="librtr0" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="72e6ec98b822c5eab98a2d5e5b66535dec85a999c7bc4e54e3668d294cd179cf" name="librtr0" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="488a9eee1ef481c4495b63fb6dbf8388b0a185d1adc27eb79a0cbab38982d735" name="librtr0" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="3d67df57c1525dc7601ad43c67d3ffb8197fce196cfecd05d57649485f845d71" name="librtr0" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="de686a7c92a886bd9627afcfe97d9c956f5ddca2c5b96a83057fcfcb5c7c6c10" name="librtr0-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="ef187fb9ed66ae3f6cadb2596b155fde4cb7ee3619ab4048280d2a132e538f56" name="librtr0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="a1ae82ea1d31b58d38683c4006ed45ab5247f554aff0d13fcef6bafb9ec1f716" name="librtr0-debuginfo" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="178cccee2552e92d38ba219bd11a5d36f4bce0e3ac74ad6baadd12081db7b13d" name="librtr0-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="0d2cb017b2ecd67ac84a2f13e63a4f63d357f34fe9a18f49bbe4ed67ba837b68" name="libyang" arch="src">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="d83c90ffe63d4423ae091e57fca7277d6811412d95feec9fdc52997910df261e" name="libyang-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="bc1857b6bd816e98e1adb9d79ee3952f439edec37742c116402ad452ac127ace" name="libyang-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="43b41016985aaa1c7d15ebb249bc7c3908071459bdef0414b3c785d2f8a39542" name="libyang-debuginfo" arch="s390x">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="8a95b28482fe7cc96ca24e28f31d8708bb65a441337b0d5a07761b5109282a2e" name="libyang-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="5574afb3d4ed926ea5c9892a03541d3490e452ecc3e4fb75140185b3b75448be" name="libyang-debugsource" arch="aarch64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="a2d491b8f91617c5bc4eaa1cc7fccb949570b7531c43c1bfcdacc7d11a351a36" name="libyang-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="e943406b8079ece08184e4bab0cbc8d6b18772ab3aee25171fd2f96e4771c667" name="libyang-debugsource" arch="s390x">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="e504dd268ad8ba1c7459e00696a3777de3493059f9e3a3c870966b4a6a83b20c" name="libyang-debugsource" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="749818c17155fffa2f4124b031b8961a18a821e7300c05386abbb6d00e7b0faa" name="libyang-devel" arch="aarch64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="dbba30760759de338d2b277333a69ef46a85f9a9372760fef70bd0469e0e1656" name="libyang-devel" arch="ppc64le">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="5a449949f60409b1bbc989080604a131dae443cf6c8798ed4e8919ebfe566a61" name="libyang-devel" arch="s390x">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="f593f98d9f77ac9495c19ea04d4283dcf98371b9021a5ee0a00de0e5305f5476" name="libyang-devel" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="009e6183c4ccd401c82b1b4d95d930c6dbe8f51bdd0339ef71958b2e71632335" name="libyang-doc" arch="noarch">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="93a7940ca21198bd80704c56f74eceb319f7e62d1db3cacd37174ee9d30ee803" name="libyang3" arch="aarch64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="b981e9b3f4eb0a00a0e41c72fdf83ca518f99bd5c1736d38445c8e61ad948dc0" name="libyang3" arch="ppc64le">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="ee82769edbed923efd5c3a37424ac377b38ba6840d5cb7be01f69229a677c3a0" name="libyang3" arch="s390x">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="92443172095306b2249909c0da89669c1c40725be2fab4dfa7bc8a9698c94c3d" name="libyang3" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="0eed114e7465ef955be8e93856a7d5b91c145579d549fe1ccb48ad587f12402d" name="libyang3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="cf7afabb70cbac8f80b98ec5537e5bd62b637153f27364d11c2389c0f594c7e1" name="libyang3-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="11e19f8714cfc971ed692f7a6fe71717b9b0aa7ad20535e4ce4c4fee9b10ac41" name="libyang3-debuginfo" arch="s390x">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="a7eb3e2498dd354218caf5359e55a475fdfd612ee3bb263c092425350bbaf9cc" name="libyang3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="5a3d27dd3bfe4542c6f9e174c03bee3330a5cdd6bc8e47f7b3e5dd7474e8c23b" name="rtr-tools" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="bdd411f84f6a5bcaa7114262eeb654e9d957fa07292879f346ca59f4cdf72781" name="rtr-tools" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="fbf146fe4764744ba8b325a08fe72848257245cdde0a0218d340fe1944710bb3" name="rtr-tools" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="727fded9e78416c8bbf827f3b7978b78a8df3045acc8bb6b15b9adcebcb43cae" name="rtr-tools" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="7feaa3f38a409644b0eea820d9f547447097ccc68e0c014ab9eac28666933181" name="rtr-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="56cc7ff96bb3b8484fc3648c8883ff65553db8724873482ff9bb2df3f877a3c4" name="rtr-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="4d6dc09db7db7e46812c3592ef815c1bf22c16a1ee023332ad44d834d55b2c2b" name="rtr-tools-debuginfo" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="a4f5bceb39feb5cf1d6346f563019d71ce3bd371ff459108468200653afce961" name="rtr-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="dbe451202c5098b498d2414d953b04c121a4debfd6652c1ed1acd93b4409aab2" name="rtrlib" arch="src">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="fb3cbada2ce17a7fc7756d5c480ec2a0fee80e2c1a97b1f4ea474219d4416a34" name="rtrlib-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="f4bdf2a1474f16c776101a532efbc75e65bb073700ac2793e67fe3dc9c7927c3" name="rtrlib-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="b15a3a21b9ad3b26a831d8452afbafee31368d60e54cbcf61024f99e7f122f1d" name="rtrlib-debuginfo" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="9395c36561564b239e8469b8074c8d5024c8cb78f9e7a7e87e8289935b9fa16d" name="rtrlib-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="821d0be253f51abb6d43d22f4912be9e39c7a5301d5231dff118c14db961ec52" name="rtrlib-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="a34fd07a6a9895183d5e8c8ff844abea0e472050c2edc907cd49e09cdcd85e8a" name="rtrlib-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="985e32f3d4eb82cee4ffc79773814e6d431013996705b6ddec348122895ebeed" name="rtrlib-debugsource" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="10e37dd5d2966290a00f958f68ea7e1f91c88d8ade4109de43c8aafb3814fe96" name="rtrlib-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="6a7c789c2270e3a8099b6803e8fd8d261353f4d539b079d2db063a4783925b11" name="rtrlib-devel" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="cb9f018a0297abc8f33f461fcfa7e3fcc4c1214f2753d179ebc8d25ad0603130" name="rtrlib-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="a0d14399efc517940de0c4e0b8a8392111c433c66c8c17a9b442d59d2133eae9" name="rtrlib-devel" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="5a527d21d7d5b23c382f0b4844e3d394c01ab8a512cd52259928b25e61d62795" name="rtrlib-devel" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="423c5cce8e77de284ff098f5244efbc713cfb1927026359b1be2be022ea227ef" name="rtrlib-devel-doc" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="150600.9.1"/>
  <changelog author="mardnh@gmx.de" date="1549195200">- Initial package, version 0.6.3
- Add patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="jengelh@inai.de" date="1549454400">- Trim bias from descriptions.
- Drop technically unfounded Requires lines.</changelog>
  <changelog author="mardnh@gmx.de" date="1563451200">- Update to version 0.7.0
  * Fix to ensure shadow tables are only freed when initialized
    before
  * Fix SSH transport w/o bind address and add host key verification
  * Fix bug in cache groups to ensure uniqueness of cache server
    preferences
  * Fix race condition in rtr_stop
  * Remove error PDU null termination check
  * Update tommyds implementation to version 2.2
  * tools/rpki-rov: improve validation of command line arguments
  * tools/rtrclient: add ROA export with templates, support for CSV
    and JSON
  * Output log messages to stderr instead of stdout
  * style: increase max line length to 120 characters
- Update patch:
  * rtrlib-disable-tests-that-require-network-connections.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1635163200">- Update to version 0.8.0
  * Fix blocking when stopping sockets in some cases
  * Add callback to allow user created sockets
  * Add ability to change the connect timeout
  * Add support for password authentication to ssh transport
  * Update tools to allow for password authentication when using
    ssh transport
  * Improve error handling in ssh transport
  * Improve error output in TCP transport
  * Improve libssh detection when running configure
  * Initialise structures properly in rtrclient
  * Fix several compiler warnings
  * Extend log messages to include prefixes when using ssh transport
  * Fix bug that constantly called tr_recv because of ignoring
    timeout argument when using ssh transport
  * Apply kernel coding style in all source files</changelog>
  <changelog author="dimstar@opensuse.org" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="9d825af52a2e58865ee1a08c36b3dadcb660b277deef8069fbc11d207113a299" name="yang-tools" arch="aarch64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="c9f432a123e1c243afda3048848343de620030dc1849658e636a3051361f8b12" name="yang-tools" arch="ppc64le">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="6481d5b309d6e7691bea65c4fb7a092bfd51b30104636f6ed7be898813a5eb0d" name="yang-tools" arch="s390x">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="60f520af0724a7b26783a28a9c3e17875d530f19a817cf5cfda53e092f1d7655" name="yang-tools" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="bb7c3f16b41494676c8136d1d666c466890d0fbd209b4744681435063a9b70b5" name="yang-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="2b7cb029a26d1e656bcb5be457a5fcd2899dbd620965e3fb0228baa07eed66f6" name="yang-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="dbf28523c16eb1d0e897d4aae7e026d50a8b078e51d26d0d5d1e305be97098f8" name="yang-tools-debuginfo" arch="s390x">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
<package pkgid="4831b8734bf211d6886def0361f7ac574a2892278dd2dc05384e1dfbe6fccadb" name="yang-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.6" rel="150600.3.1"/>
  <changelog author="adam.majer@suse.de" date="1576843200">- Package extensions in a separate package - libyang-extentions</changelog>
  <changelog author="mardnh@gmx.de" date="1576929600">- Run testsuite</changelog>
  <changelog author="mardnh@gmx.de" date="1581768000">- Update to version 1.0.130
  * new functions lyd_find_sibling*() for searching for a specific
    sibling
    + if available, they use hashes meaning the search complexity
    is constant!
  * leafref validation no longer cached
    + may make validation slightly longer but editing data is
    much faster
  * minor C++ binding fixes
  * minor schema/data parser bugfixes
  * other general bugfixes
- Update to version 1.0.109
  * new LYB parser flag to allow using updated modules
  * minor fixes in action validation
  * other minor fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1588852800">- Update to version 1.0.167
  Bugfix release only
  * bugfixes in almost all the components</changelog>
  <changelog author="mardnh@gmx.de" date="1592049600">- Update to version 1.0.176
  Main features of this release are:
  * completely new CFFI Python bindings
  * printer and internal bugfixes
  * better support of older compilers</changelog>
  <changelog author="mardnh@gmx.de" date="1596283200">- Update to version 1.0.184
  * CFFI Python bindings were moved into a separated repository
  * new functions and clarified behavior of current functions for
    changing state of YANG features
  * several bugfixes (#1104, #1119, #1123, #1133)</changelog>
  <changelog author="mardnh@gmx.de" date="1622894400">- Update to version 1.0.240
  Main changes of this release are:
  * config deviation fixes
  * state leaf-list validation fixes
  * XPath derived-from() fixes
  * minor memory problems fixes
  * other minor bugfixes
- Update to version 1.0.225
  * bugfixes in various parts of the library
- Update to version 1.0.215
  Main changes of this release are:
  * JSON printer bugfixes
  * data validation fixes
  * minor XPath optimizations
  * C++ bindings improvements
  * many other minor bugfixes</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Upgrade to Release 2.0.97
  * All language bingdings dropped: libyang-cpp and python-yang
  * Standard extensions are now built-in: libyang-extentions removed
- Extension path changed from upstream default to allow co-existence
  with possible future version</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 2.0.112
  * Support for XPath variables
  * Bugfixes:
  * Performance issues related to LYB format
  * Memory leaks and double-free in XPath and LYB
  * Opaque node handling in lists and at top-level</changelog>
  <changelog author="dmueller@suse.com" date="1649592000">- update to 2.0.164:
  * Windows support (thanks to @jktjkt)
  * Schema Mount support
  * schema compilation fixes
  * minor schema printer fixes
  * user-ordered list diff bugfix
  * JSON anyxml/anydata format fixed
  * XML parser CDATA support
  * module caching improvements
  * doc improvements
  * many other various bugfixes</changelog>
  <changelog author="mardnh@gmx.de" date="1651924800">- Update to version 2.0.194
  * major yanglint improvements
  * minor XPath fixes
  * nested extension handling fixes
  * other minor bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 2.0.231
  * XPath axes support</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 2.1.4:
  * large extensions refactoring
  * increased ext plugin API version
  * new callbacks and capabilities of plugins
  * changes in the parsed and compiled ext instance structures
  * native support for structure extension
  * error path logging improvements
  * fixed unions with leafrefs
  * yanglint schema mount support
  * huge number of other fixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- update to v2.1.30:
  * many JSON printer/parser fixes and improvements
  * unintentionally large library size reduced
  * thread safety improvements
  * big-endian compatibility fix
  * uncrustify updated
  * lots of other fixes and improvements</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1680609600">- update to v2.1.55:
  * type compilation fixes
  * multi-error validation support
  * JSON parser fixes
  * portability improvements
  * schema-mount support improvements
  * minor optimizations
  * other minor fixes
- fixed bsc#1210072, CVE-2023-26916</changelog>
  <changelog author="dmueller@suse.com" date="1699790400">- update to 2.1.128:
  * revert of `identityref` canonical value change
  * the identity always printed with the module name as the
    prefix
  * data tree and hash table optimizations
  * opaque node handling fixes and improvements
  * lots of other bug fixes
- update to 2.1.111:
  * opaque node parsing improved
  * native RESTCONF operation parsing support
  * `union` value error reporting improved
  * new `yanglint` and `yangre` tests
  * optional support for leafref with XPath functions
  * lots of other fixes and improvements
- update to 2.1.80:
  * RESTCONF message parsing
  * JSON parser refactor
  * timezone DST handling
  * public hash table API
  * stored union value bugfix
  * many other clarifications, improvements, and bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- version update to 2.1.148
  * lots of bugfixes and improvements in various parts of the library</changelog>
  <changelog author="pgajdos@suse.com" date="1756814400">- version update to 3.13.5
  3.1.0
  * lots of improvements and bugfixes in various parts of the library
  3.4.2
  * data handling optimizations
  * 32b build fixes
  * various bugfixes
  3.7.8
  * yanglint UTF8 support
  * validation optimizations
  * lots of bugfixes
  3.12.2
  * optional xxhash faster hasing function
  * support for metadata in diff
  * lots of optimizations and fixes
  3.13.5
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1775822400">- update to 5.4.9:
  * all the important changes mentioned in the transition manual
  * `bin` value functions removed
  * LYB uses complex encoding
  * `tree` printer refactored
  * schema mount improvements
  * `anydata` changes
  * xpath support
  * native tree traversal support
  * extension support significantly improved
  * OpenConfig extensions support
  * LYB format improvements
  * strict `anydata` parsing (@ahassany)
  * lots of other bugfixes and minor improvements
  * all the important changes mentioned in the transition manual
  * major LYB binary format optimizations
  * user-ordered lists `diff` fixes
  * validation optimizations
  * lots of other bugfixes and improvements
  * *yanglint* `extension-instance` YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
  <changelog author="dmueller@suse.com" date="1776859200">- downgrade to 3.13.6 (only consumer of libyang in TW is frr which
  is not compatible with libyang5 yet):
  * yanglint extension-instance YANG data validation support
  * compatibility fixes for FreeBSD
  * minor LYB data format improvements
  * lots of other bugfixes and improvements</changelog>
</package>
</otherdata>