diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..2afc8aa --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/quagga-1.2.4.tar.gz diff --git a/.quagga.metadata b/.quagga.metadata new file mode 100644 index 0000000..01c9ff5 --- /dev/null +++ b/.quagga.metadata @@ -0,0 +1 @@ +8e1471624f5baf54b53be6636e451824d3ef15f6 SOURCES/quagga-1.2.4.tar.gz diff --git a/SOURCES/0001-service-file-braces.patch b/SOURCES/0001-service-file-braces.patch new file mode 100644 index 0000000..8afd1d4 --- /dev/null +++ b/SOURCES/0001-service-file-braces.patch @@ -0,0 +1,120 @@ +From: Michal Ruprich +diff --git a/redhat/bgpd.service b/redhat/bgpd.service +index a50bfff..2eda1b8 100644 +--- a/redhat/bgpd.service ++++ b/redhat/bgpd.service +@@ -11,7 +11,7 @@ Documentation=man:bgpd + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/bgpd.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/bgpd.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/bgpd.conf + ExecStart=/usr/sbin/bgpd -d $BGPD_OPTS -f /etc/quagga/bgpd.conf + Restart=on-abort + +diff --git a/redhat/isisd.service b/redhat/isisd.service +index 93663aa..db33281 100644 +--- a/redhat/isisd.service ++++ b/redhat/isisd.service +@@ -11,7 +11,7 @@ Documentation=man:isisd + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/isisd.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/isisd.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/isisd.conf + ExecStart=/usr/sbin/isisd -d $ISISD_OPTS -f /etc/quagga/isisd.conf + Restart=on-abort + +diff --git a/redhat/nhrpd.service b/redhat/nhrpd.service +index 5b4120d..043c220 100644 +--- a/redhat/nhrpd.service ++++ b/redhat/nhrpd.service +@@ -11,7 +11,7 @@ Documentation=man:nhrpd + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/nhrpd.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/nhrpd.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/nhrpd.conf + ExecStart=/usr/sbin/nhrpd -d $NHRPD_OPTS -f /etc/quagga/nhrpdd.conf + Restart=on-abort + +diff --git a/redhat/ospf6d.service b/redhat/ospf6d.service +index 3c1c978..a0d6223 100644 +--- a/redhat/ospf6d.service ++++ b/redhat/ospf6d.service +@@ -11,7 +11,7 @@ Documentation=man:ospf6d + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ospf6d.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ospf6d.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ospf6d.conf + ExecStart=/usr/sbin/ospf6d -d $OSPF6D_OPTS -f /etc/quagga/ospf6d.conf + Restart=on-abort + +diff --git a/redhat/ospfd.service b/redhat/ospfd.service +index 0084b6c..ffc048a 100644 +--- a/redhat/ospfd.service ++++ b/redhat/ospfd.service +@@ -11,7 +11,7 @@ Documentation=man:ospfd + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ospfd.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ospfd.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ospfd.conf + ExecStart=/usr/sbin/ospfd -d $OSPFD_OPTS -f /etc/quagga/ospfd.conf + Restart=on-abort + +diff --git a/redhat/pimd.service b/redhat/pimd.service +index 1916846..ae30f16 100644 +--- a/redhat/pimd.service ++++ b/redhat/pimd.service +@@ -9,7 +9,7 @@ Documentation=man:pimd + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/pimd.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/pimd.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/pimd.conf + ExecStart=/usr/sbin/pimd -d $PIMD_OPTS -f /etc/quagga/pimd.conf + Restart=on-abort + +diff --git a/redhat/ripd.service b/redhat/ripd.service +index 103b5a9..56e885a 100644 +--- a/redhat/ripd.service ++++ b/redhat/ripd.service +@@ -11,7 +11,7 @@ Documentation=man:ripd + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ripd.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ripd.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ripd.conf + ExecStart=/usr/sbin/ripd -d $RIPD_OPTS -f /etc/quagga/ripd.conf + Restart=on-abort + +diff --git a/redhat/ripngd.service b/redhat/ripngd.service +index 6fe6ba8..c0defa0 100644 +--- a/redhat/ripngd.service ++++ b/redhat/ripngd.service +@@ -11,7 +11,7 @@ Documentation=man:ripngd + Type=forking + EnvironmentFile=/etc/sysconfig/quagga + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ripngd.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ripngd.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ripngd.conf + ExecStart=/usr/sbin/ripngd -d $RIPNGD_OPTS -f /etc/quagga/ripngd.conf + Restart=on-abort + +diff --git a/redhat/zebra.service b/redhat/zebra.service +index fa5a004..d4ba5ea 100644 +--- a/redhat/zebra.service ++++ b/redhat/zebra.service +@@ -11,8 +11,8 @@ Type=forking + EnvironmentFile=-/etc/sysconfig/quagga + ExecStartPre=/sbin/ip route flush proto zebra + ExecStartPre=-/bin/chmod -f 640 /etc/quagga/vtysh.conf /etc/quagga/zebra.conf +-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /run/quagga /etc/quagga/zebra.conf +-ExecStartPre=-/bin/chown -f ${QUAGGA_USER}${VTY_GROUP:+":$VTY_GROUP"} quaggavty /etc/quagga/vtysh.conf ++ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /run/quagga /etc/quagga/zebra.conf ++ExecStartPre=-/bin/sh -c '/bin/chown -f ${QUAGGA_USER}${VTY_GROUP:+":$VTY_GROUP"} /etc/quagga/vtysh.conf' + ExecStart=/usr/sbin/zebra -d $ZEBRA_OPTS -f /etc/quagga/zebra.conf + Restart=on-abort + diff --git a/SOURCES/quagga-filter-perl-requires.sh b/SOURCES/quagga-filter-perl-requires.sh new file mode 100755 index 0000000..db82cfd --- /dev/null +++ b/SOURCES/quagga-filter-perl-requires.sh @@ -0,0 +1,3 @@ +#!/bin/sh + +/usr/lib/rpm/perl.req $* | grep -v "Net::Telnet" diff --git a/SOURCES/quagga-tmpfs.conf b/SOURCES/quagga-tmpfs.conf new file mode 100644 index 0000000..8974b64 --- /dev/null +++ b/SOURCES/quagga-tmpfs.conf @@ -0,0 +1 @@ +d /var/run/quagga 0755 quagga quagga diff --git a/SPECS/quagga.spec b/SPECS/quagga.spec new file mode 100644 index 0000000..d59850e --- /dev/null +++ b/SPECS/quagga.spec @@ -0,0 +1,714 @@ +%define quagga_uid 92 +%define quagga_gid 92 +%define vty_group quaggavt +%define vty_gid 85 + +%global _hardened_build 1 + +Name: quagga +Version: 1.2.4 +Release: 3%{?dist} +Summary: Routing daemon +License: GPLv2+ +Group: System Environment/Daemons +URL: http://www.quagga.net +Source0: http://download.savannah.gnu.org/releases/quagga/%{name}-%{version}.tar.gz +Source1: quagga-filter-perl-requires.sh +Source2: quagga-tmpfs.conf +BuildRequires: perl-generators pkgconfig +BuildRequires: systemd +BuildRequires: net-snmp-devel +BuildRequires: texinfo libcap-devel texi2html +BuildRequires: readline readline-devel ncurses ncurses-devel +BuildRequires: git +BuildRequires: c-ares-devel +Requires: net-snmp ncurses c-ares +Requires(post): systemd /sbin/install-info +Requires(preun): systemd /sbin/install-info +Requires(postun): systemd +Provides: routingdaemon = %{version}-%{release} +Obsoletes: quagga-sysvinit + +Patch0: 0001-service-file-braces.patch + +%define __perl_requires %{SOURCE1} + +%description +Quagga is free software that operates TCP/IP-based routing protocols. It takes +a multi-server and multi-threaded approach to resolving the current complexity +of the Internet. + +Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS (experimental), OSPFv2, +OSPFv3, RIPv1, RIPv2, RIPng, PIM-SSM and NHRP. + +Quagga is intended to be used as a Route Server and a Route Reflector. It is +not a toolkit; it provides full routing power under a new architecture. +Quagga by design has a process for each protocol. + +Quagga is a fork of GNU Zebra. + +%package contrib +Summary: Contrib tools for quagga +Group: System Environment/Daemons + +%description contrib +Contributed/3rd party tools which may be of use with quagga. + +%package devel +Summary: Header and object files for quagga development +Group: System Environment/Daemons +Requires: %{name} = %{version}-%{release} + +%description devel +The quagga-devel package contains the header and object files necessary for +developing OSPF-API and quagga applications. + +%prep +%autosetup -S git_am + +%build +%configure \ + --sysconfdir=%{_sysconfdir}/quagga \ + --libdir=%{_libdir}/quagga \ + --libexecdir=%{_libexecdir}/quagga \ + --localstatedir=%{_localstatedir}/run/quagga \ + --enable-ipv6=yes \ + --enable-isisd=yes \ + --enable-snmp=agentx \ + --enable-multipath=64 \ + --enable-opaque-lsa \ + --enable-ospf-te \ + --enable-vtysh=yes \ + --enable-ospfclient=no \ + --enable-ospfapi=no \ + --enable-user=quagga \ + --enable-group=quagga \ + --enable-vty-group=%vty_group \ + --enable-rtadv \ + --disable-exampledir \ + --enable-netlink \ + --enable-nhrpd + +make %{?_smp_mflags} MAKEINFO="makeinfo --no-split" CFLAGS="%{optflags} -fno-strict-aliasing" + +pushd doc +texi2html quagga.texi +popd + +%install +mkdir -p %{buildroot}/etc/{quagga,rc.d/init.d,sysconfig,logrotate.d} \ + %{buildroot}/var/log/quagga %{buildroot}%{_infodir} \ + %{buildroot}%{_unitdir} + +make DESTDIR=%{buildroot} INSTALL="install -p" CP="cp -p" install + +# Remove this file, as it is uninstalled and causes errors when building on RH9 +rm -rf %{buildroot}/usr/share/info/dir + +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/zebra.service %{buildroot}%{_unitdir}/zebra.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/isisd.service %{buildroot}%{_unitdir}/isisd.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ripd.service %{buildroot}%{_unitdir}/ripd.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ospfd.service %{buildroot}%{_unitdir}/ospfd.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/bgpd.service %{buildroot}%{_unitdir}/bgpd.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ospf6d.service %{buildroot}%{_unitdir}/ospf6d.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ripngd.service %{buildroot}%{_unitdir}/ripngd.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/pimd.service %{buildroot}%{_unitdir}/pimd.service +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/nhrpd.service %{buildroot}%{_unitdir}/nhrpd.service + +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/quagga.sysconfig %{buildroot}/etc/sysconfig/quagga +install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/quagga.logrotate %{buildroot}/etc/logrotate.d/quagga + +install -d -m 770 %{buildroot}/var/run/quagga + +install -d -m 755 %{buildroot}/%{_tmpfilesdir} +install -p -m 644 %{SOURCE2} %{buildroot}/%{_tmpfilesdir}/quagga.conf + +rm %{buildroot}%{_libdir}/quagga/*.a +rm %{buildroot}%{_libdir}/quagga/*.la + +%pre +getent group %vty_group >/dev/null 2>&1 || groupadd -r -g %vty_gid %vty_group >/dev/null 2>&1 || : +getent group quagga >/dev/null 2>&1 || groupadd -g %quagga_gid quagga >/dev/null 2>&1 || : +getent passwd quagga >/dev/null 2>&1 || useradd -u %quagga_uid -g %quagga_gid -M -r -s /sbin/nologin \ + -c "Quagga routing suite" -d %{_localstatedir}/run/quagga quagga >/dev/null 2>&1 || : +usermod -a -G %vty_group quagga + +%post +%systemd_post zebra.service +%systemd_post isisd.service +%systemd_post ripd.service +%systemd_post ospfd.service +%systemd_post bgpd.service +%systemd_post ospf6d.service +%systemd_post ripngd.service + +ls %{_infodir}/%{name}.inf* > /dev/null 2>&1 +if [ $? -eq 0 ]; then + install-info %{_infodir}/quagga.info %{_infodir}/dir || : +fi + +# Create dummy files if they don't exist so basic functions can be used. +if [ ! -e %{_sysconfdir}/quagga/zebra.conf ]; then + echo "hostname `hostname`" > %{_sysconfdir}/quagga/zebra.conf + chown quagga:quagga %{_sysconfdir}/quagga/zebra.conf + chmod 640 %{_sysconfdir}/quagga/zebra.conf +fi + +if [ ! -e %{_sysconfdir}/quagga/vtysh.conf ]; then + touch %{_sysconfdir}/quagga/vtysh.conf + chmod 640 %{_sysconfdir}/quagga/vtysh.conf + chown quagga:%{vty_group} %{_sysconfdir}/quagga/vtysh.conf +fi + +%postun +%systemd_postun_with_restart zebra.service +%systemd_postun_with_restart isisd.service +%systemd_postun_with_restart ripd.service +%systemd_postun_with_restart ospfd.service +%systemd_postun_with_restart bgpd.service +%systemd_postun_with_restart ospf6d.service +%systemd_postun_with_restart ripngd.service + +ls %{_infodir}/%{name}.inf* > /dev/null 2>&1 +if [ $? -eq 0 ]; then + install-info --delete %{_infodir}/quagga.info %{_infodir}/dir || : +fi + +%preun +%systemd_preun zebra.service +%systemd_preun isisd.service +%systemd_preun ripd.service +%systemd_preun ospfd.service +%systemd_preun bgpd.service +%systemd_preun ospf6d.service +%systemd_preun ripngd.service + +%files +%defattr(-,root,root) +%doc AUTHORS COPYING +%doc zebra/zebra.conf.sample +%doc isisd/isisd.conf.sample +%doc ripd/ripd.conf.sample +%doc bgpd/bgpd.conf.sample* +%doc ospfd/ospfd.conf.sample +%doc ospf6d/ospf6d.conf.sample +%doc ripngd/ripngd.conf.sample +%doc doc/quagga.html +%doc doc/mpls +%doc ChangeLog INSTALL NEWS README REPORTING-BUGS SERVICES TODO +%dir %attr(750,quagga,quagga) %{_sysconfdir}/quagga +%dir %attr(750,quagga,quagga) /var/log/quagga +%dir %attr(750,quagga,quagga) /var/run/quagga +%{_infodir}/*info* +%{_mandir}/man*/* +%exclude %{_mandir}/man*/watchquagga.* +%{_sbindir}/* +%exclude %{_sbindir}/watchquagga +%{_bindir}/* +%dir %{_libdir}/quagga +%{_libdir}/quagga/*.so.* +%config(noreplace) %attr(640,root,root) /etc/logrotate.d/quagga +%config(noreplace) /etc/sysconfig/quagga +%{_tmpfilesdir}/quagga.conf +%{_unitdir}/*.service + +%files contrib +%defattr(-,root,root) +%doc AUTHORS COPYING %attr(0644,root,root) tools + +%files devel +%defattr(-,root,root) +%doc AUTHORS COPYING +%dir %{_libdir}/quagga/ +%{_libdir}/quagga/*.so +%dir %{_includedir}/quagga +%{_includedir}/quagga/*.h +%dir %{_includedir}/quagga/ospfd +%{_includedir}/quagga/ospfd/*.h + +%changelog +* Mon Aug 27 2018 Michal Ruprich - 1.2.4-3 +- Resolves: #1607348 - /bin/chown: missing operand after /etc/quagga/ripd.conf + +* Thu Aug 09 2018 Josef Ridky - 1.2.4-2 +- Rebuild for Net-SNMP + +* Sat May 05 2018 Michal Ruprich - 1.2.4-1 +- New version 1.2.4 + +* Thu Feb 22 2018 Ondřej Lysoněk - 1.2.2-4 +- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing + certain forms of UPDATE message allowing to crash or potentially execute + arbitrary code +- Resolves: rhbz#1546008 +- Fixed CVE-2018-5380 - bgpd can overrun internal BGP code-to-string + conversion tables potentially allowing crash +- Resolves: rhbz#1546006 +- Fixed CVE-2018-5381 - Infinite loop issue triggered by invalid OPEN message + allows denial-of-service +- Resolves: rhbz#1546004 +- Fixed CVE-2018-5378 - bgpd does not properly bounds check the data sent with + a NOTIFY allowing leak of sensitive data or crash +- Resolves: rhbz#1546009 + +* Fri Feb 09 2018 Igor Gnatenko - 1.2.2-3 +- Escape macros in %%changelog + +* Sat Jan 20 2018 Björn Esser - 1.2.2-2 +- Rebuilt for switch to libxcrypt + +* Tue Nov 14 2017 Michal Ruprich - 1.2.2-1 +- rebase to 1.2.2(#1504420) +- resolves #1462426 - Installing with dnf produces error /var/tmp/rpm-tmp.jMe0EE: line 44 [: too many arguments +- resolves #1509292 - CVE-2017-16227 quagga: Incorrect AS_PATH size calculation for long paths + +* Fri Aug 11 2017 Igor Gnatenko - 1.2.1-6 +- Rebuilt after RPM update (№ 3) + +* Thu Aug 10 2017 Igor Gnatenko - 1.2.1-5 +- Rebuilt for RPM soname bump + +* Thu Aug 10 2017 Igor Gnatenko - 1.2.1-4 +- Rebuilt for RPM soname bump + +* Thu Aug 03 2017 Fedora Release Engineering - 1.2.1-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Thu Jul 27 2017 Fedora Release Engineering - 1.2.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Mon May 29 2017 Michal Ruprich - 1.2.1-1 +- rebase to 1.2.1(#1431309) +- added quagga to quaggavt group - resolves #1434028 +- enabled pimd and nhrpd +- fix bogus date in changelog + +* Sat Feb 11 2017 Fedora Release Engineering - 1.1.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Wed Feb 01 2017 Michal Sekletar - 1.1.1-1 +- rebase to 1.1.1 (#1415873, #1416017) + +* Thu Jan 12 2017 Igor Gnatenko - 1.1.0-2 +- Rebuild for readline 7.x + +* Thu Oct 20 2016 Michal Sekletar - 1.1.0-1 +- rebase to 1.1.0 (#1316324, #1316572, #1331373, #1386110) + +* Thu Feb 04 2016 Fedora Release Engineering - 0.99.24.1-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Mon Jul 27 2015 Richard W.M. Jones - 0.99.24.1-2 +- Bump version to rebuild against new RPM in Rawhide. + +* Mon Jun 29 2015 Michal Sekletar - 0.99.24.1-1 +- update to 0.99.24.1 (#1114339) + +* Thu Jun 18 2015 Fedora Release Engineering - 0.99.22.4-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Sun Aug 17 2014 Fedora Release Engineering - 0.99.22.4-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Sun Jun 08 2014 Fedora Release Engineering - 0.99.22.4-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Mon May 26 2014 Michal Sekletar - 0.99.22.4-4 +- raise privileges before creating netlink socket (#1097684) + +* Wed Jan 29 2014 Michal Sekletar - 0.99.22.4-3 +- fix source url +- fix date in the changelog + +* Mon Jan 06 2014 Michal Sekletar - 0.99.22.4-2 +- reference pidfiles in service files (#1025798) + +* Fri Sep 13 2013 Michal Sekletar - 0.99.22.4-1 +- update to 0.99.22.4 + +* Sat Aug 03 2013 Petr Pisar - 0.99.22.3-2 +- Perl 5.18 rebuild + +* Tue Jul 30 2013 Michal Sekletar - 0.99.22.3-1 +- update to 0.99.22.3 + +* Tue Jul 30 2013 Michal Sekletar - 0.99.22.2-2 +- enabled hardened build + +* Tue Jul 30 2013 Michal Sekletar - 0.99.22.2-1 +- update to 0.99.22.2 + +* Mon Jul 22 2013 Michal Sekletar - 0.99.22.1-9 +- disable ospfapi and ospfclient +- fix bogus dates in changelog +- resolves : #984532 + +* Thu Jul 18 2013 Petr Pisar - 0.99.22.1-8 +- Perl 5.18 rebuild + +* Fri Jun 21 2013 Michal Sekletar - 0.99.22.1-7 +- quagga is service which might implement networking, thus it should not have + WantedBy=network.target in its systemd configuration +- resolves: #976883 + +* Mon Jun 10 2013 Michal Sekletar - 0.99.22.1-6 +- obsolete quagga-sysvinit subpackage +- use macro to specify location where to install tmpfiles configuration file +- fix rpm scripts handling documentation in info format + +* Thu Jun 06 2013 Michal Sekletar - 0.99.22.1-5 +- configure quagga using correct user + +* Tue May 28 2013 Michal Sekletar - 0.99.22.1-4 +- call chmod on correct path + +* Mon May 27 2013 Michal Sekletar - 0.99.22.1-3 +- build package with required compiler flags + +* Fri May 17 2013 Michal Sekletar - 0.99.22.1-2 +- claim ownership of libdir/quagga directory +- fix dependencies + +* Fri Apr 19 2013 Michal Sekletar - 0.99.22.1-1 +- update to 0.99.22.1 +- install tmpfiles dropping configuration to proper location +- drop sysv subpackage and initscripts support + +* Tue Mar 26 2013 Adam Tkac - 0.99.22-2 +- fix typo in ipv6.texi documentation + +* Wed Feb 20 2013 Adam Tkac - 0.99.22-1 +- update to 0.99.22 +- quagga-CVE-2012-1820.patch has been merged +- explicitly enable SMNP AgentX interface + +* Thu Feb 14 2013 Fedora Release Engineering - 0.99.21-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Fri Jul 27 2012 Fedora Release Engineering - 0.99.21-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Thu Jul 12 2012 Adam Tkac 0.99.21-3 +- build with -fno-strict-aliasing + +* Thu Jun 07 2012 Adam Tkac 0.99.21-2 +- fix CVE-2012-1820 + +* Thu May 03 2012 Adam Tkac 0.99.21 +- update to 0.99.21 +- various packaging fixes + +* Thu Mar 15 2012 Jiri Skala - 0.99.20.1-1 +- updated to latest upstream version 0.99.20.1 + +* Sat Jan 14 2012 Fedora Release Engineering - 0.99.20-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Wed Nov 23 2011 Jiri Skala - 0.99.20-4 +- modified permissions of var dirs (fixes #755491) + +* Wed Oct 26 2011 Fedora Release Engineering - 0.99.20-3 +- Rebuilt for glibc bug#747377 + +* Tue Oct 18 2011 Jiri Skala - 0.99.20-2 +- fixes #746886 - severe memory leak in quagga 0.99.{19,20} + +* Fri Sep 30 2011 Jiri Skala - 0.99.20-1 +- updated to latest upstream version 0.99.20 +- fixes #741343 - CVE-2011-3325 corrected fix + +* Thu Sep 29 2011 Jiri Skala - 0.99.19-1 +- fixes #741343 - CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 CVE-2011-3326 CVE-2011-3327 +- fixes #741580 - updated to latest upstream version 0.99.19 + +* Thu Aug 18 2011 Jiri Skala - 0.99.18-9 +- rebuild for rpm + +* Mon Aug 01 2011 Jiri Skala - 0.99.18-8 +- rebuild for libcap + +* Tue Jul 19 2011 Jiri Skala - 0.99.18-7 +- fixes #716561 - isisd binary is not included in quagga + +* Tue Jul 19 2011 Jiri Skala - 0.99.18-6 +- fixes #719610 - add unit files, SysV initscripts moved to subpackage + +* Mon Jul 11 2011 Jiri Skala - 0.99.18-5 +- rebuild with new snmp + +* Wed Jun 08 2011 Jiri Skala - 0.99.18-4 +- removed conflicts tag + +* Thu Apr 28 2011 Jiri Skala - 0.99.18-3 +- fixes Requires /sbin/{chkconfig, install-info} (#226352 - Merge review) + +* Thu Mar 31 2011 Jiri Skala - 0.99.18-2 +- rebuild to keep correct nvr rule F15 vers. F16 + +* Wed Mar 23 2011 Jiri Skala - 0.99.18-1 +- fixes #689852 - CVE-2010-1674 CVE-2010-1675 quagga various flaws +- fixes #690087 - ripd fails to start +- fixes #689763 - updated to latest upstream version 0.99.18 + +* Tue Feb 08 2011 Fedora Release Engineering - 0.99.17-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Wed Dec 08 2010 Jiri Skala - 0.99.17-4 +- #656681 - using tmpfiles.d + +* Thu Dec 02 2010 Jiri Skala - 0.99.17-3 +- fixes #656681 - using %%ghost on files in /var/run and /var/lock +- removed unused script from spec +- corrected installing /etc/pam.d + +* Mon Nov 01 2010 Jiri Skala - 0.99.17-2 +- rebuild for net-snmp + +* Tue Aug 31 2010 Jiri Skala - 0.99.17-1 +- update to latest upstream +- fixes #628981 - CVE-2010-2948 and CVE-2010-2949 + +* Tue Jul 20 2010 Jiri Skala - 0.99.16-5 +- fixes #525666 - Missing man-pages +- fixed and added initscript of watchquagga daemon + +* Mon Jul 12 2010 Jiri Skala - 0.99.16-4 +- added license text to subpackages +- fixes #609931 - quagga : does not adhere to Static Library Packaging Guidelines + +* Thu Jul 01 2010 Jiri Skala - 0.99.16-3 +- fixes #609616 - does not adhere to Static Library Packaging Guidelines + +* Fri Jun 11 2010 Jiri Skala - 0.99.16-2 +- pam.d is disabled + +* Wed Mar 17 2010 Jiri Skala - 0.99.16-1 +- latest upstream version +- merged initscript patches + +* Tue Jan 26 2010 Jiri Skala - 0.99.15-2 +- changes in spec file and init scritps (#226352) + +* Mon Oct 19 2009 Jiri Skala - 0.99.15-1 +- bump to latest upstream +- fixed #527734 - posix compliant init scripts + +* Mon Sep 14 2009 Jiri Skala - 0.99.12-3 +- fixed #516005 - Errors installing quagga-0.99.11-2.fc11.i586 with --excludedocs +- fixed #522787 - quagga: build future versions without PAM + +* Sun Jul 26 2009 Fedora Release Engineering - 0:0.99.12-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Tue Jul 14 2009 Jiri Skala - 0.99.12-2 +- replaced Obsoletes by Conflicts + +* Wed May 20 2009 Jiri Skala - 0.99.12-1 +- update to latest upstream version +- fix #499960 - BGPd in Quagga prior to 0.99.12 has a serious assert problem crashing with ASN4's + +* Mon May 04 2009 Jiri Skala - 0.99.11-3 +- fix #498832 - bgpd crashes on as paths containing more 6 digit as numbers +- corrected release number + +* Wed Feb 25 2009 Fedora Release Engineering - 0:0.99.11-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Tue Jan 06 2009 Jiri Skala - 0.99.11-1 +- bump to latest upstream version 0.99.11 + +* Wed Sep 3 2008 Tom "spot" Callaway - 0.99.10-2 +- fix license tag + +* Wed Jun 11 2008 Martin Nagy - 0.99.10-1 +- upgrade to new upstream 0.99.10 + +* Wed Mar 05 2008 Martin Nagy - 0.99.9-6 +- fix vtysh.conf owner and group (#416121) +- fix bpgd IPv6 advertisements, patch from upstream (#429448) + +* Mon Feb 11 2008 Martin Nagy - 0.99.9-5 +- rebuild for gcc-4.3 + +* Tue Jan 29 2008 Martin Nagy - 0.99.9-4 +- check port number range when using -P or -p (#206071) + +* Wed Jan 23 2008 Martin Nagy - 0.99.9-3 +- rebuild + +* Mon Nov 12 2007 Martin Bacovsky - 0.99.9-2 +- resolves: #376821: ospfd init script looks for ospf6 configuration and lock file +- resolves: #376841: Usage string in ospf6d init script incorrect + +* Mon Sep 17 2007 Martin Bacovsky - 0.99.9-1 +- upgrade to new upstream 0.99.9 +- Resolves: #292841: CVE-2007-4826 quagga bgpd DoS + +* Fri Sep 14 2007 Martin Bacovsky - 0.99.8-1.1 +- rebuild + +* Mon Jul 30 2007 Martin Bacovsky - 0.99.8-1 +- upgrade to new upstream version 0.99.8 +- resolves: #249423: scripts in /etc/rc.d/init.d/* are marked as config files in specfile +- resolves: #247040: Initscript Review +- resolves: #249538: Inconsistencies in init scripts +- resolves: #220531: quagga: non-failsafe install-info usage, info files removed from index on update + +* Tue Jul 3 2007 Martin Bacovsky - 0.99.7-1 +- upgrade to new upstream 0.99.7 +- resolves: #240488: CVE-2007-1995 Quagga bgpd DoS + +* Wed Mar 28 2007 Martin Bacovsky - 0.99.6-1 +- upgrade to new upstream 0.99.6 +- Resolves: #233909: quagga: unowned directory +- removed redundant patches (#226352) + +* Mon Jan 22 2007 Martin Bacovsky - 0.98.6-3 +- Resolves: #172548 - quagga.spec defines with_vtysh 1 but vtysh is not enabled in the build + +* Wed Jul 12 2006 Jesse Keating - 0:0.98.6-2.1 +- rebuild + +* Mon May 8 2006 Jay Fenlason 0:0.98.6-2 +- Upgrade to new upstream version, closing security problems: + bz#191081 CVE-2006-2223 Quagga RIPd information disclosure + bz#191085 CVE-2006-2224 Quagga RIPd route injection + +* Wed Mar 8 2006 Bill Nottingham - 0:0.98.5-4 +- use an assigned gid for quaggavt + +* Fri Feb 10 2006 Jesse Keating - 0:0.98.5-3.2.1 +- bump again for double-long bug on ppc(64) + +* Tue Feb 07 2006 Jesse Keating - 0:0.98.5-3.2 +- rebuilt for new gcc4.1 snapshot and glibc changes + +* Fri Dec 09 2005 Jesse Keating +- rebuilt + +* Wed Oct 19 2005 Jay Fenlason 0.98.5-3 +- add the -pie patch, to make -fPIE compiling actually work on all platforms. +- Include -pam patch to close + bz#170256 ? pam_stack is deprecated +- Change ucd-snmp to net-snmp to close + bz#164333 ? quagga 0.98.4-2 requires now obsolete package ucd-snmp-devel +- also fix duplicate line mentioned in bz#164333 + +* Mon Aug 29 2005 Jay Fenlason 0.98.5-2 +- New upstream version. + +* Mon Jun 27 2005 Jay Fenlason 0.98.4-2 +- New upstream version. + +* Mon Apr 4 2005 Jay Fenlason 0.98.3-2 +- new upstream verison. +- remove the -bug157 patch. + +* Tue Mar 8 2005 Jay Fenlason 0.98.2-2 +- New upstream version, inclues my -gcc4 patch, and a patch from + Vladimir Ivanov + +* Sun Jan 16 2005 Jay Fenlason 0.98.0-2 +- New upstream version. This fixes bz#143796 +- --with-rtadv needs to be --enable-rtadv according to configure. + (but it was enabled by default, so this is a cosmetic change only) + Change /etc/logrotate.d/* to /etc/logrotate.d/quagga in this spec file. +- Modify this spec file to move the .so files to the base package + and close bz#140894 +- Modify this spec file to separate out macro <_includedir>/quagga/ospfd + from .../*.h and macro <_includedir>/quagga/ospfapi from .../*.h + Rpmbuild probably shouldn't allow macro of a plain file. + +* Wed Jan 12 2005 Tim Waugh 0.97.3-3 +- Rebuilt for new readline. +- Don't explicitly require readline. The correct dependency is automatically + picked up by linking against it. + +* Fri Nov 26 2004 Florian La Roche +- remove target buildroot again to not waste disk space + +* Wed Nov 10 2004 Jay Fenlason 0.97.3-1 +- New upstream version. + +* Tue Oct 12 2004 Jay Fenlason 0.97.2-1 +- New upstream version. + +* Fri Oct 8 2004 Jay Fenlason 0.97.0-1 +- New upstream version. This obsoletes the -lib64 patch. + +* Wed Oct 6 2004 Jay Fenlason +- Change the permissions of /var/run/quagga to 771 and /var/log/quagga to 770 + This closes #134793 + +* Thu Sep 9 2004 Bill Nottingham 0.96.5-2 +- don't run by default + +* Tue Jun 15 2004 Elliot Lee +- rebuilt + +* Tue May 4 2004 Jay Fenlason 0.96.5-0 +- New upstream version +- Change includedir +- Change the pre scriptlet to fail if the useradd command fails. +- Remove obsolete patches from this .spec file and renumber the two + remaining ones. + +* Tue Mar 02 2004 Elliot Lee +- rebuilt + +* Fri Feb 13 2004 Jay Fenlason +- Add --enable-rtadv, to turn ipv6 router advertisement back on. Closes + bugzilla #114691 + +* Fri Feb 13 2004 Elliot Lee +- rebuilt + +* Mon Nov 3 2003 Jay Fenlason 0.96.4-0 +- New upstream version +- include .h files in the -devel package. + +* Wed Oct 15 2003 Jay Fenlason 0.96.3-1 +- Patch a remote DoS attack (#107140) +- New upstream version +- Removed the .libcap patch, which was applied upstream +- Renamed the vty group from quaggavty to quaggavt because quaggavty is + too long for NIS. +- Patch the spec file to fix #106857: /etc/quagga/zebra.conf is created with + the wrong owner. +- Removed the "med" part of the 0.96.1-warnings patch for . . . +- Add a new warnings patch with a fix for #106315. This also updates + the "med" part of the previous warnings patch. + +* Mon Sep 22 2003 Jay Fenlason 0.96.2-5 +- merge sysconfig patch from 3E branch. This patch is from Kaj J. Niemi + (kajtzu@basen.net), and puts Quagga configuration options in + /etc/sysconfig/quagga, and defaults Quagga to listening on 127.0.0.1 only. + This closes #104376 +- Use /sbin/nologin for the shell of the quagga user. This closes #103320 +- Update the quagga-0.96.1-warnings.patch patch to kill a couple more + warnings. + +* Mon Sep 22 2003 Nalin Dahyabhai +- Remove the directory part of paths for PAM modules in quagga.pam, allowing + libpam to search its default directory (needed if a 64-bit libpam needs to + look in /lib64/security instead of /lib/security). + +* Tue Aug 26 2003 Jay Fenlason 0.96.2-1 +- New upstream version + +* Tue Aug 19 2003 Jay Fenlason 0.96.1-3 +- Merge from quagga-3E-branch, with a fix for #102673 and a couple + more compiler warnings quashed. + +* Wed Aug 13 2003 Jay Fenlason 0.96-1 +- added a patch (libwrap) to allow the generated Makefiles for zebra/ + and lib/ to work on AMD64 systems. For some reason make there does + not like a dependency on -lcap +- added a patch (warnings) to shut up warnings about an undefined + structure type in some function prototypes and quiet down all the + warnings about assert(ptr) on x86_64. +- Modified the upstream quagga-0.96/readhat/quagga.spec to work as an + official Red Hat package (remove user and group creation and changes + to services) +- Trimmed changelog. See the upstream .spec file for previous + changelog entries.