pool/frr
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
57 Commits 2 Branches 0 Tags 21 MiB
9b46f1712c
Commit Graph

57 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
9b46f1712c Accepting request 1108711 from network 
OBS-URL: https://build.opensuse.org/request/show/1108711
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=25
 2023-09-04 20:52:42 +00:00
Martin Hauke
fbadf37a51 Accepting request 1108163 from home:mtomaschewski:frr 
- Removed protobuf-c BuildRequires (source package name) breaking
  build-system setup with libprotobuf-c-devel 1.3.2 updates.
- Apply upstream fix for bgpd: Don't read initial byte of the ORF
  header in an ahead-of-stream situation (CVE-2023-41360,
  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
  length is zero (CVE-2023-41358,bsc#1214735,
  https://github.com/FRRouting/frr/pull/14260)
  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
  https://github.com/FRRouting/frr/pull/14290)
  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]

OBS-URL: https://build.opensuse.org/request/show/1108163
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=51
 2023-09-03 14:42:25 +00:00
Dominique Leuenberger
07b077893b Accepting request 1090241 from network 
OBS-URL: https://build.opensuse.org/request/show/1090241
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=24
 2023-06-01 15:20:50 +00:00
Marcus Meissner
694815f1d3 Accepting request 1088895 from home:mtomaschewski:branches:network 
- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]

OBS-URL: https://build.opensuse.org/request/show/1088895
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=49
 2023-06-01 10:02:15 +00:00
Dominique Leuenberger
11d7c93795 Accepting request 1077239 from network 
OBS-URL: https://build.opensuse.org/request/show/1077239
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=23
 2023-04-04 19:27:35 +00:00
Martin Hauke
addf7abe6b Accepting request 1077182 from home:mtomaschewski:branches:network 
- Enable pim6d providing PIMv6 support (bsc#1206234)

OBS-URL: https://build.opensuse.org/request/show/1077182
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=47
 2023-04-04 15:27:10 +00:00
Dominique Leuenberger
ebd17cfb1d Accepting request 1058297 from network 
OBS-URL: https://build.opensuse.org/request/show/1058297
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=22
 2023-01-13 23:03:42 +00:00
Martin Hauke
3ffde6cb9b Accepting request 1058229 from home:schubi2:pam_usr_etc 
- Migration of PAM settings to /usr/lib/pam.d.

OBS-URL: https://build.opensuse.org/request/show/1058229
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=45
 2023-01-13 18:50:56 +00:00
Dominique Leuenberger
12f3483621 Accepting request 1035865 from network 
OBS-URL: https://build.opensuse.org/request/show/1035865
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=21
 2022-11-16 14:43:09 +00:00
Martin Hauke
729276ccdc Accepting request 1035289 from home:mtomaschewski:branches:network 
- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
   - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
   - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
   - 0006-isisd-fix-10505-using-base64-encoding.patch,
   - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
   - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  *  Implement Route Leak Prevention and Detection Using Roles in UPDATE

OBS-URL: https://build.opensuse.org/request/show/1035289
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=43
 2022-11-15 14:31:19 +00:00
Dominique Leuenberger
857f9bd362 Accepting request 1001516 from network 
OBS-URL: https://build.opensuse.org/request/show/1001516
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=20
 2022-09-07 09:05:55 +00:00
Martin Hauke
9b537df10f Accepting request 1001489 from home:mtomaschewski:frr 
Fixed bug number in changes file to:
 - Apply upstream fix for a memory leak in the IS-IS daemon that
   may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
   [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]

OBS-URL: https://build.opensuse.org/request/show/1001489
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=41
 2022-09-06 19:33:51 +00:00
Martin Hauke
35f367fe53 Accepting request 1001418 from home:mtomaschewski:frr 
- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202023,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]

OBS-URL: https://build.opensuse.org/request/show/1001418
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=40
 2022-09-06 12:14:05 +00:00
Dominique Leuenberger
3ecf89a58c Accepting request 963468 from network 
OBS-URL: https://build.opensuse.org/request/show/963468
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=19
 2022-03-21 19:11:41 +00:00
Dirk Mueller
f8566d7d81 Accepting request 962454 from home:dimstar:Factory 
- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}

OBS-URL: https://build.opensuse.org/request/show/962454
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=38
 2022-03-21 07:45:03 +00:00
Dominique Leuenberger
01c063db3a Accepting request 958103 from network 
OBS-URL: https://build.opensuse.org/request/show/958103
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=18
 2022-03-01 16:03:26 +00:00
Martin Hauke
96a81d154e Accepting request 958040 from home:mtomaschewski:frr 
- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]

OBS-URL: https://build.opensuse.org/request/show/958040
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=37
 2022-02-28 19:21:42 +00:00
Dominique Leuenberger
e2c079f28b Accepting request 937650 from network 
OBS-URL: https://build.opensuse.org/request/show/937650
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=17
 2021-12-09 18:45:43 +00:00
Martin Hauke
2fc51f9063 Accepting request 937520 from home:jsegitz:branches:systemdhardening:network 
- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).

OBS-URL: https://build.opensuse.org/request/show/937520
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=36
 2021-12-09 09:26:15 +00:00
Dominique Leuenberger
57b06e7ada Accepting request 932045 from network 
OBS-URL: https://build.opensuse.org/request/show/932045
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=16
 2021-11-18 09:34:47 +00:00
Martin Hauke
4daa3f80a5 Accepting request 931901 from home:linnaea:branches:network 
- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/

OBS-URL: https://build.opensuse.org/request/show/931901
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=35
 2021-11-17 23:50:34 +00:00
Dominique Leuenberger
6576698637 Accepting request 925497 from network 
OBS-URL: https://build.opensuse.org/request/show/925497
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=15
 2021-10-15 21:03:35 +00:00
Martin Hauke
dc346218a1 Accepting request 925455 from home:jsegitz:branches:systemdhardening_protectclock 
- Drop ProtectClock hardening, can cause issues if other device acceess is needed

OBS-URL: https://build.opensuse.org/request/show/925455
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=34
 2021-10-15 14:54:13 +00:00
Martin Hauke
2f62ce9820 Accepting request 924307 from home:linnaea:branches:network 
- Update to version 8.0.1
  * refreshed patch:
    - 0001-disable-zmq-test.patch
    - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
     and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1

OBS-URL: https://build.opensuse.org/request/show/924307
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=33
 2021-10-13 19:19:15 +00:00
Dominique Leuenberger
d5e421410f Accepting request 921883 from network 
OBS-URL: https://build.opensuse.org/request/show/921883
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=14
 2021-09-28 17:16:31 +00:00
Martin Hauke
1ff1676d67 Accepting request 919470 from home:jsegitz:branches:systemdhardening:network 
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/919470
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=32
 2021-09-27 18:40:19 +00:00
Dominique Leuenberger
9c6f84980f Accepting request 888005 from network 
OBS-URL: https://build.opensuse.org/request/show/888005
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=13
 2021-04-24 21:08:55 +00:00
Martin Hauke
9291c97e61 Accepting request 887909 from home:mtomaschewski:frr 
- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)

OBS-URL: https://build.opensuse.org/request/show/887909
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=30
 2021-04-23 11:44:07 +00:00
Richard Brown
a2962f8a79 Accepting request 876921 from network 
OBS-URL: https://build.opensuse.org/request/show/876921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=12
 2021-03-05 12:48:58 +00:00
Dirk Mueller
9e316ce306 Accepting request 876832 from home:mnhauke:network 
- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in

OBS-URL: https://build.opensuse.org/request/show/876832
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=28
 2021-03-05 07:54:18 +00:00
Dominique Leuenberger
b31f256e40 Accepting request 863290 from network 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/863290
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=11
 2021-01-15 18:46:49 +00:00
Olaf Hering
5ef36a13ed - Requires libyang 1.0.184 
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=26
 2021-01-08 09:40:29 +00:00
Dominique Leuenberger
44aa54a662 Accepting request 858156 from network 
OBS-URL: https://build.opensuse.org/request/show/858156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=10
 2020-12-22 14:14:42 +00:00
Martin Hauke
94cb5e92a0 Accepting request 858155 from home:rtorrero:branches:network 
- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]

OBS-URL: https://build.opensuse.org/request/show/858155
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=24
 2020-12-22 12:46:45 +00:00
Dominique Leuenberger
dc9187444d Accepting request 846085 from network 
OBS-URL: https://build.opensuse.org/request/show/846085
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=9
 2020-11-05 20:55:05 +00:00
Erico Mendonca
c81535df89 Accepting request 846077 from home:mnhauke:network 
- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default

OBS-URL: https://build.opensuse.org/request/show/846077
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=22
 2020-11-04 20:36:58 +00:00
Dominique Leuenberger
72e946238c Accepting request 839177 from network 
OBS-URL: https://build.opensuse.org/request/show/839177
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=8
 2020-10-05 17:38:41 +00:00
Martin Hauke
9eb024d08f Accepting request 839160 from home:mtomaschewski:frr 
A little cleanup as preparation to add frr to SLE-15-SP3 (jsc#15015)
- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list

OBS-URL: https://build.opensuse.org/request/show/839160
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=20
 2020-10-02 15:12:56 +00:00
Dominique Leuenberger
7849ffbd4c Accepting request 818119 from network 
OBS-URL: https://build.opensuse.org/request/show/818119
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=7
 2020-07-02 22:10:57 +00:00
Erico Mendonca
3108c93e06 Accepting request 818116 from home:mnhauke:network 
- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch

OBS-URL: https://build.opensuse.org/request/show/818116
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=18
 2020-07-01 13:21:17 +00:00
Dominique Leuenberger
2d374f9508 Accepting request 810509 from network 
OBS-URL: https://build.opensuse.org/request/show/810509
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=6
 2020-06-03 18:31:57 +00:00
Erico Mendonca
92d9b00c17 Accepting request 810508 from home:emendonca:branches:network 
- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).

OBS-URL: https://build.opensuse.org/request/show/810508
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=16
 2020-05-31 22:57:31 +00:00
Dominique Leuenberger
9d5d9000e1 Accepting request 800828 from network 
OBS-URL: https://build.opensuse.org/request/show/800828
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=5
 2020-05-07 12:55:11 +00:00
Erico Mendonca
9b95823f32 Accepting request 800800 from home:mnhauke:network 
- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog

OBS-URL: https://build.opensuse.org/request/show/800800
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=14
 2020-05-06 19:45:06 +00:00
Dominique Leuenberger
284d0e9c5e Accepting request 792567 from network 
OBS-URL: https://build.opensuse.org/request/show/792567
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=4
 2020-04-09 21:15:38 +00:00
Erico Mendonca
2a330836ae Accepting request 792552 from home:darix:routing 
- enable verbose make rules 
- enable grpc support. new subpackage libfrrgrpc_pb0, new BR:
  pkgconfig(grpc)
- enable config rollbacks. new BR: pkgconfig(sqlite3)
- enable realms support
- enable shell access
- make sure we use system openssl
- fix shebang line of the frr-reload.py and
  generate_support_bundle.py script so we dont pull python2
- do not delete users and groups.
- add Requires for libyang-extentions

OBS-URL: https://build.opensuse.org/request/show/792552
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=12
 2020-04-08 22:39:51 +00:00
Dominique Leuenberger
894e22a8e5 Accepting request 791565 from network 
OBS-URL: https://build.opensuse.org/request/show/791565
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=3
 2020-04-07 08:28:42 +00:00
Erico Mendonca
2c315c1300 Accepting request 791563 from home:mnhauke:network 
- Update to version 7.3
  * Upstream does not provide a changelog this time
- Remove patch:
  * fix_tests.patch (not longer needed)

OBS-URL: https://build.opensuse.org/request/show/791563
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=10
 2020-04-05 19:29:20 +00:00
Dominique Leuenberger
22089f131e Accepting request 770084 from network 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/770084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=2
 2020-02-05 18:41:51 +00:00
Dominique Leuenberger
ba0346c9f4 Accepting request 765390 from network 
I want to maintain frr in Factory

OBS-URL: https://build.opensuse.org/request/show/765390
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/frr?expand=0&rev=1
 2020-02-04 18:51:44 +00:00