Compare commits

...

67 Commits
f16 ... master

Author SHA1 Message Date
Fedora Release Engineering
e9851a5f23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-26 17:58:17 +00:00
Michal Ruprich
33352afd41 Adding conflict with frr 2019-07-21 15:21:06 +02:00
Igor Gnatenko
124c670c37
Rebuild for RPM 4.15
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2019-06-11 00:13:22 +02:00
Igor Gnatenko
ec0d1f76e8
Rebuild for RPM 4.15
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2019-06-10 17:42:05 +02:00
Igor Gnatenko
9f75513639 Rebuild for readline 8.0 2019-02-17 09:30:52 +01:00
Fedora Release Engineering
8b99b98621 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-02 10:51:51 +00:00
Igor Gnatenko
2fa4fa5707 Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
2019-01-28 20:24:44 +01:00
Igor Gnatenko
424a5c64c4
Remove obsolete scriptlets
References: https://fedoraproject.org/wiki/Changes/RemoveObsoleteScriptlets
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2019-01-27 19:40:14 +01:00
Björn Esser
a9e623e5af
Rebuilt for libcrypt.so.2 (#1666033) 2019-01-14 19:14:38 +01:00
Michal Ruprich
5705b1be77 Resolves: #1611589 - Need to use {} around the environment variables in unit files 2018-12-10 12:29:30 +01:00
Michal Ruprich
bffe5f096a Removing tetex from dependencies
Adding gcc to BuildRequires
2018-07-25 09:12:16 +02:00
Fedora Release Engineering
86794cc8fd - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-14 03:14:32 +00:00
Jason Tibbitts
7f2c4dc729 Remove needless use of %defattr 2018-07-10 01:31:48 -05:00
Michal Ruprich
7ba3ea9c42 New version 1.2.4 2018-05-04 17:46:57 +02:00
Ondřej Lysoněk
ba3a7a25ca Fix CVE-2018-5379, CVE-2018-5380, CVE-2018-5381, CVE-2018-5378
Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
Resolves: rhbz#1546008

Fixed CVE-2018-5380 - bgpd can overrun internal BGP code-to-string
  conversion tables potentially allowing crash
Resolves: rhbz#1546006

Fixed CVE-2018-5381 - Infinite loop issue triggered by invalid OPEN message
  allows denial-of-service
Resolves: rhbz#1546004

Fixed CVE-2018-5378 - bgpd does not properly bounds check the data sent with
  a NOTIFY allowing leak of sensitive data or crash
Resolves: rhbz#1546009
2018-02-22 11:59:51 +01:00
Igor Gnatenko
029751315e
Escape macros in %changelog
Reference: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/Y2ZUKK2B7T2IKXPMODNF6HB2O5T5TS6H/
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-09 09:05:53 +01:00
Björn Esser
5d78a5f28f
Rebuilt for switch to libxcrypt 2018-01-20 23:07:46 +01:00
Michal Ruprich
bb6bcef925 rebase to 1.2.2(#1504420)
resolves #1462426 - Installing with dnf produces error /var/tmp/rpm-tmp.jMe0EE: line 44 [: too many arguments
 resolves #1509292 - CVE-2017-16227 quagga: Incorrect AS_PATH size calculation for long paths
2017-11-14 13:01:31 +01:00
Igor Gnatenko
153581c73b Rebuilt after RPM update (№ 3)
Signed-off-by: Igor Gnatenko <ignatenko@redhat.com>
2017-08-11 11:07:30 +02:00
Igor Gnatenko
bc5fd2e3dd Rebuilt for RPM soname bump
Signed-off-by: Igor Gnatenko <ignatenko@redhat.com>
2017-08-10 22:12:51 +02:00
Igor Gnatenko
45a84398f5 Rebuilt for RPM soname bump
Signed-off-by: Igor Gnatenko <ignatenko@redhat.com>
2017-08-10 20:32:21 +02:00
Fedora Release Engineering
731c1ff373 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 07:26:09 +00:00
Fedora Release Engineering
1f87050e31 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 12:49:24 +00:00
Michal Ruprich
51fde2f824 rebase to 1.2.1(#1431309)
added quagga to quaggavt group - resolves #1434028
enabled pimd and nhrpd
fix bogus date in changelog
2017-05-30 14:15:29 +02:00
Fedora Release Engineering
541f305fae - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 11:25:43 +00:00
Michal Sekletar
20ea4a204e Rebase to quagga-1.1.1
Note that rebased package contains fix for CVE-2017-5495

Resolves: #1415873, #1416017
2017-02-01 11:33:55 +01:00
Igor Gnatenko
18d014af52 Rebuild for readline 7.x
Signed-off-by: Igor Gnatenko <ignatenko@redhat.com>
2017-01-12 17:30:38 +01:00
Michal Sekletar
230ed3d5c0 Update sources 2016-10-26 14:17:00 +02:00
Michal Sekletar
a955835699 Rebase to 1.1.0
This rebases fixes following security issues:
  - CVE-2016-2342 quagga: VPNv4 NLRI parses memcpys to stack on unchecked length (#1316572)
  - CVE-2016-4049 quagga: denial of service vulnerability in BGP routing daemon (#1331373)
  - CVE-2016-1245 quagga: Buffer Overflow in IPv6 RA handling (#1386110)

Also babeld was dropped by upstream.

Resolves: #1316324, #1316572, #1331373, #1386110, #1387654
2016-10-24 17:31:54 +02:00
Petr Písař
f951d03fd8 Mandatory Perl build-requires added <https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl> 2016-06-24 10:44:31 +02:00
Fedora Release Engineering
d82f87e8a2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 21:50:44 +00:00
Richard W.M. Jones
33c2f5e934 Bump version to rebuild against new RPM in Rawhide.
This package links against librpm:

linker flags            : -Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -rdynamic -lcrypt  -Wl,-z,relro -Wl,-z,now -L/usr/lib64 -lnetsnmpmibs -lsensors -ldl -lrpm -lrpmio -lnetsnmpagent -lwrap -Wl,--enable-new-dtags -Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -lnetsnmp -lssl -lssl -lcrypto -lm -lrt -lcap  -ltermcap -lreadline -lm

and so requires rebuilding because there has been a librpm
SONAME bump in Rawhide.
2015-07-27 14:02:21 +01:00
Michal Sekletar
0e55b15e01 Update to 0.99.24.1 2015-06-29 14:40:34 +02:00
Dennis Gilmore
dc4f9265f0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-18 21:55:45 +00:00
Peter Robinson
8f015eac43 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-17 23:05:29 +00:00
Dennis Gilmore
edd56b08f4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 20:33:23 -05:00
Michal Sekletar
63f996c821 zebra: raise the privileges before calling socket()
Because of recent changes when creating AF_NETLINK socket, kernel will
cache capabilities of the caller and if file descriptor is used or
otherwise handed to another process it will check that current user has
necessary capabilities to use the socket. Hence we need to ensure we
have necessary capabilities when creating the socket and at the time we
use the socket.

See: http://www.spinics.net/lists/netdev/msg280198.html
Resolves: #1097684
2014-05-26 16:28:05 +02:00
Michal Sekletar
2e3aea77a2 spec: fix date in the changelog 2014-01-29 13:49:50 +01:00
Michal Sekletar
671d207c61 spec: fix source url
tarballs for official upstream releases are stored at
http://download.savannah.gnu.org/releases/quagga/
2014-01-29 13:47:24 +01:00
Michal Sekletar
cd7585ea4d spec: it is 2014 already 2014-01-06 13:25:40 +01:00
Michal Sekletar
935ba739d0 systemd: reference pidfiles in service files
quagga daemons don't remove pidfiles before exit. Previously it was done by
init script, now pidfiles stay around after daemon is stopped. If they are
referenced in service files systemd will remove them automatically after service
is stopped.

Also fix typo, there is no BindTo dependency, change to BindsTo.
2014-01-06 13:21:59 +01:00
Michal Sekletar
278464f2ec spec: update to 0.99.22.4 2013-09-13 18:00:11 +02:00
Petr Písař
5f75efbaed Perl 5.18 rebuild 2013-08-03 15:49:11 +02:00
Michal Sekletar
9479f8bfb8 spec: update to 0.99.22.3
This release fixes failing build on FreeBSD. Once again, not really
needed but for consistency sake we'll just do it anyway.
2013-07-30 19:06:51 +02:00
Michal Sekletar
6d1f50934b spec: fix copy-paste error in NVR in changelog 2013-07-30 16:52:14 +02:00
Michal Sekletar
9de1505d36 spec: enable hardened build
rpm-checksec revealed that ospfd is not compiled as PIE. We enable
hardened build in specfile, this should not break anything and it should
take care of enabling security related compiler options.
2013-07-30 16:46:43 +02:00
Michal Sekletar
30871293d5 spec: add systemd to BuildRequires
We install tmpfiles configuration fragment and %{_tmpfilesdir} macro is
provided by systemd. Let's please this save and add systemd explicitly
as build requirement.
2013-07-30 16:30:18 +02:00
Michal Sekletar
6130a74175 spec: update to 0.99.22.2
Update to the latest upstream. 0.99.22.2 delivers only the fix for
CVE-2013-2236. We have ospfapi and ospfclient disabled, but in order
to be consistent we push update anyway.

Resolves: #990015

http://nongnu.askapache.com//quagga/quagga-0.99.22.2.changelog.txt
2013-07-30 16:21:06 +02:00
Michal Sekletar
eb8f08ba5e spec: fix bogus dates in changelog 2013-07-23 14:13:06 +02:00
Michal Sekletar
c17c7f3c42 ospfd: disable ospfapi and ospfclient
Disable those features during configuration of package build since they
present security risk and never really worked properly anyway.

http://lists.quagga.net/pipermail/quagga-dev/2013-July/010622.html
2013-07-23 14:13:04 +02:00
Petr Písař
843dacf9cf Perl 5.18 rebuild 2013-07-18 02:56:23 +02:00
Michal Sekletar
fe94d73489 systemd: change the WantedBy target
Previously with configuration WantedBy=network.target it could happen
that after enabling let's say zebra and bgpd and restarting the server
services won't be started. In case when no service pulls in
network.target quagga daemons won't start, because they are enabled
under network.target. This might be the case when only zebra is used
for configuring interfaces and other services like NM and initscripts
are disabled.

This commit also removes ordering dependency on syslog.target, since
this is redundant these days, because systemd-journald is early boot
service.
2013-06-21 20:34:02 +02:00
Michal Sekletar
a0891a693d spec: fix rpm scripts handling documentation in info format 2013-06-10 15:10:40 +02:00
Michal Sekletar
6221d91101 spec: use %{_tmpfilesdir} macro instead of hard coded path 2013-06-10 15:09:32 +02:00
Michal Sekletar
1e6014930f spec: obsolete sysvinit subpackage 2013-06-10 13:18:18 +02:00
Michal Sekletar
6d65f131c3 spec: configure quagga using correct user 2013-06-06 15:01:39 +02:00
Michal Sekletar
06d201d22d spec: call chmod on correct path 2013-05-28 16:33:13 +02:00
Michal Sekletar
4301666558 spec: build package with appropriate compiler flags 2013-05-27 15:32:07 +02:00
Michal Sekletar
b2ec84e2cd spec: fix broken dependencies
We should depend on /sbin/install-info instead of
/usr/sbin/install-info. Once usrmove is done properly we can change
it back.

Also we should claim ownership of directory %{_libdir}/quagga.
2013-05-17 14:19:45 +02:00
Michal Sekletar
da8daef3e2 spec: rebase to version 0.99.22.1
Rebase quagga to the newest upstream release 0.99.22.1. Drop unneeded
patch.

Changelog:
http://gnu.mirrors.pair.com/savannah/savannah//quagga/quagga-0.99.22.1.changelog.txt
2013-05-14 14:49:04 +02:00
Michal Sekletar
052748f271 spec: install tmpfiles configuration to /usr/lib/tmpfiles.d
https://fedoraproject.org/wiki/Packaging:Tmpfiles.d
2013-04-19 17:00:53 +02:00
Michal Sekletar
06add1b054 spec: cleanup a little bit 2013-04-19 16:54:31 +02:00
Adam Tkac
611000ff34 Fix building of documentation
Signed-off-by: Adam Tkac <atkac@redhat.com>
2013-03-26 13:39:22 +01:00
Adam Tkac
a26f9aeab4 Update to 0.99.22
- quagga-CVE-2012-1820.patch has been merged
- explicitly enable SMNP AgentX interface

Signed-off-by: Adam Tkac <atkac@redhat.com>
2013-02-20 14:49:18 +01:00
Dennis Gilmore
ed23ed1175 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild 2013-02-14 15:16:21 -06:00
Dennis Gilmore
b588ceae89 Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-27 01:16:04 -05:00
Adam Tkac
f24af48eca Build with -fno-strict-aliasing
Signed-off-by: Adam Tkac <atkac@redhat.com>
2012-07-12 14:55:36 +02:00
5 changed files with 446 additions and 420 deletions

13
.gitignore vendored
View File

@ -4,3 +4,16 @@ quagga-0.99.17.tar.gz
/quagga-0.99.19.tar.gz
/quagga-0.99.20.tar.gz
/quagga-0.99.20.1.tar.gz
/quagga-0.99.22.tar.xz
/quagga-0.99.22.1.tar.xz
/quagga-0.99.22.2.tar.xz
/quagga-0.99.22.3.tar.xz
/quagga-0.99.22.4.tar.xz
/quagga-0.99.24.1.tar.xz
/quagga-1.1.0.tar.gz
/quagga-1.1.1.tar.gz
/quagga-1.2.1.tar.gz
/quagga-1.2.2.tar.gz
/quagga-1.2.2.tar.gz.asc
/quagga-1.2.4.tar.gz
/quagga-1.2.4.tar.gz.asc

View File

@ -0,0 +1,120 @@
From: Michal Ruprich <mruprich@redhat.com>
diff --git a/redhat/bgpd.service b/redhat/bgpd.service
index a50bfff..2eda1b8 100644
--- a/redhat/bgpd.service
+++ b/redhat/bgpd.service
@@ -11,7 +11,7 @@ Documentation=man:bgpd
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/bgpd.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/bgpd.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/bgpd.conf
ExecStart=/usr/sbin/bgpd -d $BGPD_OPTS -f /etc/quagga/bgpd.conf
Restart=on-abort
diff --git a/redhat/isisd.service b/redhat/isisd.service
index 93663aa..db33281 100644
--- a/redhat/isisd.service
+++ b/redhat/isisd.service
@@ -11,7 +11,7 @@ Documentation=man:isisd
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/isisd.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/isisd.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/isisd.conf
ExecStart=/usr/sbin/isisd -d $ISISD_OPTS -f /etc/quagga/isisd.conf
Restart=on-abort
diff --git a/redhat/nhrpd.service b/redhat/nhrpd.service
index 5b4120d..043c220 100644
--- a/redhat/nhrpd.service
+++ b/redhat/nhrpd.service
@@ -11,7 +11,7 @@ Documentation=man:nhrpd
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/nhrpd.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/nhrpd.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/nhrpd.conf
ExecStart=/usr/sbin/nhrpd -d $NHRPD_OPTS -f /etc/quagga/nhrpdd.conf
Restart=on-abort
diff --git a/redhat/ospf6d.service b/redhat/ospf6d.service
index 3c1c978..a0d6223 100644
--- a/redhat/ospf6d.service
+++ b/redhat/ospf6d.service
@@ -11,7 +11,7 @@ Documentation=man:ospf6d
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ospf6d.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ospf6d.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ospf6d.conf
ExecStart=/usr/sbin/ospf6d -d $OSPF6D_OPTS -f /etc/quagga/ospf6d.conf
Restart=on-abort
diff --git a/redhat/ospfd.service b/redhat/ospfd.service
index 0084b6c..ffc048a 100644
--- a/redhat/ospfd.service
+++ b/redhat/ospfd.service
@@ -11,7 +11,7 @@ Documentation=man:ospfd
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ospfd.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ospfd.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ospfd.conf
ExecStart=/usr/sbin/ospfd -d $OSPFD_OPTS -f /etc/quagga/ospfd.conf
Restart=on-abort
diff --git a/redhat/pimd.service b/redhat/pimd.service
index 1916846..ae30f16 100644
--- a/redhat/pimd.service
+++ b/redhat/pimd.service
@@ -9,7 +9,7 @@ Documentation=man:pimd
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/pimd.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/pimd.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/pimd.conf
ExecStart=/usr/sbin/pimd -d $PIMD_OPTS -f /etc/quagga/pimd.conf
Restart=on-abort
diff --git a/redhat/ripd.service b/redhat/ripd.service
index 103b5a9..56e885a 100644
--- a/redhat/ripd.service
+++ b/redhat/ripd.service
@@ -11,7 +11,7 @@ Documentation=man:ripd
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ripd.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ripd.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ripd.conf
ExecStart=/usr/sbin/ripd -d $RIPD_OPTS -f /etc/quagga/ripd.conf
Restart=on-abort
diff --git a/redhat/ripngd.service b/redhat/ripngd.service
index 6fe6ba8..c0defa0 100644
--- a/redhat/ripngd.service
+++ b/redhat/ripngd.service
@@ -11,7 +11,7 @@ Documentation=man:ripngd
Type=forking
EnvironmentFile=/etc/sysconfig/quagga
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/ripngd.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /etc/quagga/ripngd.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /etc/quagga/ripngd.conf
ExecStart=/usr/sbin/ripngd -d $RIPNGD_OPTS -f /etc/quagga/ripngd.conf
Restart=on-abort
diff --git a/redhat/zebra.service b/redhat/zebra.service
index fa5a004..d4ba5ea 100644
--- a/redhat/zebra.service
+++ b/redhat/zebra.service
@@ -11,8 +11,8 @@ Type=forking
EnvironmentFile=-/etc/sysconfig/quagga
ExecStartPre=/sbin/ip route flush proto zebra
ExecStartPre=-/bin/chmod -f 640 /etc/quagga/vtysh.conf /etc/quagga/zebra.conf
-ExecStartPre=-/bin/chown -f $QUAGGA_USER:$QUAGGA_GROUP /run/quagga /etc/quagga/zebra.conf
-ExecStartPre=-/bin/chown -f ${QUAGGA_USER}${VTY_GROUP:+":$VTY_GROUP"} quaggavty /etc/quagga/vtysh.conf
+ExecStartPre=-/bin/chown -f ${QUAGGA_USER}:${QUAGGA_GROUP} /run/quagga /etc/quagga/zebra.conf
+ExecStartPre=-/bin/sh -c '/bin/chown -f ${QUAGGA_USER}${VTY_GROUP:+":$VTY_GROUP"} /etc/quagga/vtysh.conf'
ExecStart=/usr/sbin/zebra -d $ZEBRA_OPTS -f /etc/quagga/zebra.conf
Restart=on-abort

View File

@ -1,74 +0,0 @@
@@ -, +, @@
bgpd: CVE-2012-1820, DoS in bgp_capability_orf()
An ORF (code 3) capability TLV is defined to contain exactly one
AFI/SAFI block. Function bgp_capability_orf(), which parses ORF
capability TLV, uses do-while cycle to call its helper function
bgp_capability_orf_entry(), which actually processes the AFI/SAFI data
block. The call is made at least once and repeated as long as the input
buffer has enough data for the next call.
The helper function, bgp_capability_orf_entry(), uses "Number of ORFs"
field of the provided AFI/SAFI block to verify, if it fits the input
buffer. However, the check is made based on the total length of the ORF
TLV regardless of the data already consumed by the previous helper
function call(s). This way, the check condition is only valid for the
first AFI/SAFI block inside an ORF capability TLV.
For the subsequent calls of the helper function, if any are made, the
check condition may erroneously tell, that the current "Number of ORFs"
field fits the buffer boundary, where in fact it does not. This makes it
possible to trigger an assertion by feeding an OPEN message with a
specially-crafted malformed ORF capability TLV.
This commit fixes the vulnerability by making the implementation follow
the spec.
--- a/bgpd/bgp_open.c
+++ a/bgpd/bgp_open.c
@@ -231,7 +231,7 @@ bgp_capability_orf_entry (struct peer *peer, struct capability_header *hdr)
}
/* validate number field */
- if (sizeof (struct capability_orf_entry) + (entry.num * 2) > hdr->length)
+ if (sizeof (struct capability_orf_entry) + (entry.num * 2) != hdr->length)
{
zlog_info ("%s ORF Capability entry length error,"
" Cap length %u, num %u",
@@ -335,28 +335,6 @@ bgp_capability_orf_entry (struct peer *peer, struct capability_header *hdr)
}
static int
-bgp_capability_orf (struct peer *peer, struct capability_header *hdr)
-{
- struct stream *s = BGP_INPUT (peer);
- size_t end = stream_get_getp (s) + hdr->length;
-
- assert (stream_get_getp(s) + sizeof(struct capability_orf_entry) <= end);
-
- /* We must have at least one ORF entry, as the caller has already done
- * minimum length validation for the capability code - for ORF there must
- * at least one ORF entry (header and unknown number of pairs of bytes).
- */
- do
- {
- if (bgp_capability_orf_entry (peer, hdr) == -1)
- return -1;
- }
- while (stream_get_getp(s) + sizeof(struct capability_orf_entry) < end);
-
- return 0;
-}
-
-static int
bgp_capability_restart (struct peer *peer, struct capability_header *caphdr)
{
struct stream *s = BGP_INPUT (peer);
@@ -573,7 +551,7 @@ bgp_capability_parse (struct peer *peer, size_t length, int *mp_capability,
break;
case CAPABILITY_CODE_ORF:
case CAPABILITY_CODE_ORF_OLD:
- if (bgp_capability_orf (peer, &caphdr))
+ if (bgp_capability_orf_entry (peer, &caphdr))
return -1;
break;
case CAPABILITY_CODE_RESTART:

View File

@ -1,84 +1,46 @@
# configure options
%define with_snmp 1
%define with_vtysh 1
%define with_ospf_te 1
%define with_opaque_lsa 1
%define with_tcp_zebra 0
%define with_pam 0
%define with_ipv6 1
%define with_isisd 1
%define with_ospfclient 1
%define with_ospfapi 1
%define with_rtadv 1
%define with_multipath 64
%define quagga_uid 92
%define quagga_gid 92
%define quagga_user quagga
%define vty_group quaggavt
%define vty_gid 85
%define quagga_uid 92
%define quagga_gid 92
%define vty_group quaggavt
%define vty_gid 85
# path defines
%define _sysconfdir /etc/quagga
%define zeb_src %{_builddir}/%{name}-%{version}
%define zeb_rh_src %{zeb_src}/redhat
%define zeb_docs %{zeb_src}/doc
%global _hardened_build 1
# defines for configure
%define _libexecdir %{_exec_prefix}/libexec/quagga
%define _includedir %{_prefix}/include
%define _libdir %{_exec_prefix}/%{_lib}/quagga
%define _localstatedir /var/run/quagga
Name: quagga
Version: 1.2.4
Release: 11%{?dist}
Summary: Routing daemon
License: GPLv2+
URL: http://www.quagga.net
Source0: http://download.savannah.gnu.org/releases/quagga/%{name}-%{version}.tar.gz
Source1: quagga-filter-perl-requires.sh
Source2: quagga-tmpfs.conf
BuildRequires: perl-generators pkgconfig
BuildRequires: systemd
BuildRequires: net-snmp-devel
BuildRequires: texinfo libcap-devel texi2html
BuildRequires: readline readline-devel ncurses ncurses-devel
BuildRequires: git
BuildRequires: c-ares-devel
BuildRequires: gcc
Requires: net-snmp ncurses c-ares
Requires(post): systemd
Requires(preun): systemd
Requires(postun): systemd
Provides: routingdaemon = %{version}-%{release}
Obsoletes: quagga-sysvinit
Conflicts: frr
Summary: Routing daemon
Name: quagga
Version: 0.99.21
Release: 2%{?dist}
License: GPLv2+
Group: System Environment/Daemons
Source0: http://www.quagga.net/download/%{name}-%{version}.tar.xz
Source1: quagga-filter-perl-requires.sh
Source2: quagga-tmpfs.conf
URL: http://www.quagga.net
%if %with_snmp
BuildRequires: net-snmp-devel
Requires: net-snmp
%endif
%if %with_vtysh
BuildRequires: readline readline-devel ncurses ncurses-devel
Requires: ncurses
%endif
BuildRequires: texinfo tetex libcap-devel texi2html
%if %with_pam
BuildRequires: pam-devel
Requires: pam
%endif
Patch0001: 0001-service-file-braces.patch
%define __perl_requires %{SOURCE1}
# Initscripts > 5.60 is required for IPv6 support
Requires: initscripts >= 5.60
Requires: ncurses
Requires(post): /sbin/chkconfig
Requires(preun): /sbin/chkconfig
Requires(post): /sbin/install-info
Requires(postun): /sbin/install-info
Requires(post): systemd-units
Requires(preun): systemd-units
Requires(postun): systemd-units
Provides: routingdaemon = %{version}-%{release}
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
Patch0: quagga-CVE-2012-1820.patch
%description
Quagga is free software that operates TCP/IP-based routing protocols. It takes
a multi-server and multi-threaded approach to resolving the current complexity
of the Internet.
Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS (experimental), OSPFv2,
OSPFv3, RIPv1, RIPv2, and RIPng.
OSPFv3, RIPv1, RIPv2, RIPng, PIM-SSM and NHRP.
Quagga is intended to be used as a Route Server and a Route Reflector. It is
not a toolkit; it provides full routing power under a new architecture.
@ -86,26 +48,14 @@ Quagga by design has a process for each protocol.
Quagga is a fork of GNU Zebra.
%package sysvinit
Group: System Environment/Daemons
Summary: SysV initscript for quagga routing daemons
Requires: %{name} = %{version}-%{release}
Requires(preun): /sbin/service
Requires(postun): /sbin/service
%description sysvinit
The quagga-sysvinit contains SysV initscripts support.
%package contrib
Summary: Contrib tools for quagga
Group: System Environment/Daemons
%description contrib
Contributed/3rd party tools which may be of use with quagga.
%package devel
Summary: Header and object files for quagga development
Group: System Environment/Daemons
Requires: %{name} = %{version}-%{release}
%description devel
@ -113,329 +63,345 @@ The quagga-devel package contains the header and object files necessary for
developing OSPF-API and quagga applications.
%prep
%setup -q
%patch0 -p1 -b .CVE-2012-1820
%autosetup -S git_am
%build
# FC5+ automatic -fstack-protector-all switch
export RPM_OPT_FLAGS=${RPM_OPT_FLAGS//-fstack-protector/-fstack-protector-all}
export CFLAGS="$RPM_OPT_FLAGS $CPPFLAGS"
export CXXFLAGS="$RPM_OPT_FLAGS $CPPFLAGS"
%configure \
%if %with_ipv6
--enable-ipv6=yes \
%else
--enable-ipv6=no \
%endif
%if %with_isisd
--enable-isisd=yes \
%endif
%if %with_snmp
--enable-snmp=yes \
%endif
%if %with_multipath
--enable-multipath=%with_multipath \
%endif
%if %with_tcp_zebra
--enable-tcp-zebra \
%endif
%if %with_opaque_lsa
--enable-opaque-lsa \
%endif
%if %with_ospf_te
--enable-ospf-te \
%endif
%if %with_vtysh
--enable-vtysh=yes \
%endif
%if %with_ospfclient
--enable-ospfclient=yes \
%else
--enable-ospfclient=no\
%endif
%if %with_ospfapi
--enable-ospfapi=yes \
%else
--enable-ospfapi=no \
%endif
%if %with_pam
--with-libpam \
%endif
%if %quagga_user
--enable-user=%quagga_user \
--enable-group=%quagga_user \
%endif
%if %vty_group
--enable-vty-group=%vty_group \
%endif
%if %with_rtadv
--enable-rtadv \
%endif
--disable-exampledir \
--enable-netlink
--sysconfdir=%{_sysconfdir}/quagga \
--libdir=%{_libdir}/quagga \
--libexecdir=%{_libexecdir}/quagga \
--localstatedir=%{_localstatedir}/run/quagga \
--enable-ipv6=yes \
--enable-isisd=yes \
--enable-snmp=agentx \
--enable-multipath=64 \
--enable-opaque-lsa \
--enable-ospf-te \
--enable-vtysh=yes \
--enable-ospfclient=no \
--enable-ospfapi=no \
--enable-user=quagga \
--enable-group=quagga \
--enable-vty-group=%vty_group \
--enable-rtadv \
--disable-exampledir \
--enable-netlink \
--enable-nhrpd
make %{?_smp_mflags} MAKEINFO="makeinfo --no-split"
make %{?_smp_mflags} MAKEINFO="makeinfo --no-split" CFLAGS="%{optflags} -fno-strict-aliasing"
pushd doc
texi2html quagga.texi
popd
%install
rm -rf $RPM_BUILD_ROOT
mkdir -p %{buildroot}/etc/{quagga,rc.d/init.d,sysconfig,logrotate.d} \
%{buildroot}/var/log/quagga %{buildroot}%{_infodir} \
%{buildroot}%{_unitdir}
install -d $RPM_BUILD_ROOT/etc/{rc.d/init.d,sysconfig,logrotate.d} \
$RPM_BUILD_ROOT/var/log/quagga $RPM_BUILD_ROOT%{_infodir}
mkdir -p $RPM_BUILD_ROOT/lib/systemd/system
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}
%if %with_pam
install -d $RPM_BUILD_ROOT/etc/pam.d
%endif
make install \
DESTDIR=$RPM_BUILD_ROOT
make DESTDIR=%{buildroot} INSTALL="install -p" CP="cp -p" install
# Remove this file, as it is uninstalled and causes errors when building on RH9
rm -rf $RPM_BUILD_ROOT/usr/share/info/dir
rm -rf %{buildroot}/usr/share/info/dir
install -m 644 %{zeb_rh_src}/zebra.service $RPM_BUILD_ROOT/lib/systemd/system
%if %with_isisd
install -m 644 %{zeb_rh_src}/isisd.service $RPM_BUILD_ROOT/lib/systemd/system
%endif
install -m 644 %{zeb_rh_src}/ripd.service $RPM_BUILD_ROOT/lib/systemd/system
install -m 644 %{zeb_rh_src}/ospfd.service $RPM_BUILD_ROOT/lib/systemd/system
install -m 644 %{zeb_rh_src}/bgpd.service $RPM_BUILD_ROOT/lib/systemd/system
install -m 644 %{zeb_rh_src}/babeld.service $RPM_BUILD_ROOT/lib/systemd/system
%if %with_ipv6
install -m 644 %{zeb_rh_src}/ospf6d.service $RPM_BUILD_ROOT/lib/systemd/system
install -m 644 %{zeb_rh_src}/ripngd.service $RPM_BUILD_ROOT/lib/systemd/system
%endif
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/zebra.service %{buildroot}%{_unitdir}/zebra.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/isisd.service %{buildroot}%{_unitdir}/isisd.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ripd.service %{buildroot}%{_unitdir}/ripd.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ospfd.service %{buildroot}%{_unitdir}/ospfd.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/bgpd.service %{buildroot}%{_unitdir}/bgpd.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ospf6d.service %{buildroot}%{_unitdir}/ospf6d.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/ripngd.service %{buildroot}%{_unitdir}/ripngd.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/pimd.service %{buildroot}%{_unitdir}/pimd.service
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/nhrpd.service %{buildroot}%{_unitdir}/nhrpd.service
install %{zeb_rh_src}/zebra.init $RPM_BUILD_ROOT/etc/rc.d/init.d/zebra
%if %with_isisd
install %{zeb_rh_src}/isisd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/isisd
%endif
install %{zeb_rh_src}/bgpd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/bgpd
%if %with_ipv6
install %{zeb_rh_src}/ospf6d.init $RPM_BUILD_ROOT/etc/rc.d/init.d/ospf6d
install %{zeb_rh_src}/ripngd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/ripngd
%endif
install %{zeb_rh_src}/ospfd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/ospfd
install %{zeb_rh_src}/ripd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/ripd
install %{zeb_rh_src}/babeld.init $RPM_BUILD_ROOT/etc/rc.d/init.d/babeld
install %{zeb_rh_src}/watchquagga.init $RPM_BUILD_ROOT/etc/rc.d/init.d/watchquagga
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/quagga.sysconfig %{buildroot}/etc/sysconfig/quagga
install -p -m 644 %{_builddir}/%{name}-%{version}/redhat/quagga.logrotate %{buildroot}/etc/logrotate.d/quagga
install -m644 %{zeb_rh_src}/quagga.sysconfig $RPM_BUILD_ROOT/etc/sysconfig/quagga
%if %with_pam
install -m644 %{zeb_rh_src}/quagga.pam $RPM_BUILD_ROOT/etc/pam.d/quagga
%endif
install -m644 %{zeb_rh_src}/quagga.logrotate $RPM_BUILD_ROOT/etc/logrotate.d/quagga
install -d -m770 $RPM_BUILD_ROOT/var/run/quagga
install -d -m 770 %{buildroot}/var/run/quagga
install -d -m 755 $RPM_BUILD_ROOT/etc/tmpfiles.d
install -p -m 644 %{SOURCE2} $RPM_BUILD_ROOT/etc/tmpfiles.d/quagga.conf
install -d -m 755 %{buildroot}/%{_tmpfilesdir}
install -p -m 644 %{SOURCE2} %{buildroot}/%{_tmpfilesdir}/quagga.conf
rm $RPM_BUILD_ROOT%{_libdir}/*.a
rm $RPM_BUILD_ROOT%{_libdir}/*.la
rm %{buildroot}%{_libdir}/quagga/*.a
rm %{buildroot}%{_libdir}/quagga/*.la
%pre
# add vty_group
%if %vty_group
groupadd -g %vty_gid -r %vty_group 2> /dev/null || :
%endif
# add quagga user and group
%if %quagga_user
# Ensure that quagga_gid gets correctly allocated
if getent group %quagga_user >/dev/null 2>&1 ; then : ; else \
/usr/sbin/groupadd -g %quagga_gid %quagga_user > /dev/null 2>&1 || exit 1 ; fi
if getent passwd %quagga_user >/dev/null 2>&1 ; then : ; else \
/usr/sbin/useradd -u %quagga_uid -g %quagga_gid -M -r -s /sbin/nologin \
-c "Quagga routing suite" -d %_localstatedir %quagga_user 2> /dev/null \
|| exit 1 ; fi
%endif
getent group %vty_group >/dev/null 2>&1 || groupadd -r -g %vty_gid %vty_group >/dev/null 2>&1 || :
getent group quagga >/dev/null 2>&1 || groupadd -g %quagga_gid quagga >/dev/null 2>&1 || :
getent passwd quagga >/dev/null 2>&1 || useradd -u %quagga_uid -g %quagga_gid -M -r -s /sbin/nologin \
-c "Quagga routing suite" -d %{_localstatedir}/run/quagga quagga >/dev/null 2>&1 || :
usermod -a -G %vty_group quagga
%post
/bin/systemctl daemon-reload >/dev/null 2>&1 || :
if [ -f %{_infodir}/%{name}.inf* ]; then
/sbin/install-info %{_infodir}/%{name}.info %{_infodir}/dir || :
fi
%systemd_post zebra.service
%systemd_post isisd.service
%systemd_post ripd.service
%systemd_post ospfd.service
%systemd_post bgpd.service
%systemd_post ospf6d.service
%systemd_post ripngd.service
# Create dummy files if they don't exist so basic functions can be used.
if [ ! -e %{_sysconfdir}/zebra.conf ]; then
echo "hostname `hostname`" > %{_sysconfdir}/zebra.conf
%if %quagga_user
chown %quagga_user:%quagga_user %{_sysconfdir}/zebra.conf
%endif
chmod 640 %{_sysconfdir}/zebra.conf
if [ ! -e %{_sysconfdir}/quagga/zebra.conf ]; then
echo "hostname `hostname`" > %{_sysconfdir}/quagga/zebra.conf
chown quagga:quagga %{_sysconfdir}/quagga/zebra.conf
chmod 640 %{_sysconfdir}/quagga/zebra.conf
fi
if [ ! -e %{_sysconfdir}/vtysh.conf ]; then
touch %{_sysconfdir}/vtysh.conf
chmod 640 %{_sysconfdir}/vtysh.conf
%if %quagga_user
%if %vty_group
chown %{quagga_user}:%{vty_group} %{_sysconfdir}/vtysh.conf
%else
chown %{quagga_user}:%{quagga_user} %{_sysconfdir}/vtysh.conf
%endif
%endif
if [ ! -e %{_sysconfdir}/quagga/vtysh.conf ]; then
touch %{_sysconfdir}/quagga/vtysh.conf
chmod 640 %{_sysconfdir}/quagga/vtysh.conf
chown quagga:%{vty_group} %{_sysconfdir}/quagga/vtysh.conf
fi
%postun
/bin/systemctl daemon-reload >/dev/null 2>&1 || :
if [ -f %{_infodir}/%{name}.inf* ]; then
/sbin/install-info --delete %{_infodir}/quagga.info %{_infodir}/dir || :
fi
%systemd_postun_with_restart zebra.service
%systemd_postun_with_restart isisd.service
%systemd_postun_with_restart ripd.service
%systemd_postun_with_restart ospfd.service
%systemd_postun_with_restart bgpd.service
%systemd_postun_with_restart ospf6d.service
%systemd_postun_with_restart ripngd.service
%preun
if [ "$1" = "0" ]; then
/bin/systemctl disable ripd.service > /dev/null 2>&1 || :
/bin/systemctl stop ripd.service > /dev/null 2>&1 || :
/bin/systemctl disable bgpd.service > /dev/null 2>&1 || :
/bin/systemctl stop bgpd.service > /dev/null 2>&1 || :
/bin/systemctl disable zebra.service > /dev/null 2>&1 || :
/bin/systemctl stop zebra.service > /dev/null 2>&1 || :
%if %with_isisd
/bin/systemctl disable isisd.service > /dev/null 2>&1 || :
/bin/systemctl stop isisd.service > /dev/null 2>&1 || :
%endif
/bin/systemctl disable ospfd.service > /dev/null 2>&1 || :
/bin/systemctl stop ospfd.service > /dev/null 2>&1 || :
/bin/systemctl disable babeld.service > /dev/null 2>&1 || :
/bin/systemctl stop babeld.service > /dev/null 2>&1 || :
%if %with_ipv6
/bin/systemctl disable ospf6d.service > /dev/null 2>&1 || :
/bin/systemctl stop ospf6d.service > /dev/null 2>&1 || :
/bin/systemctl disable ripngd.service > /dev/null 2>&1 || :
/bin/systemctl stop ripngd.service > /dev/null 2>&1 || :
%endif
fi
%triggerun -- %{name} < 0.99.21-1
/bin/systemctl disable watchquagga.service > /dev/null 2>&1 || :
/bin/systemctl stop watchquagga.service > /dev/null 2>&1 || :
%triggerun -- %{name} < 0.99.18-6
/sbin/service watchquagga stop >/dev/null 2>&1 || :
/sbin/chkconfig --del zebra >/dev/null 2>&1 || :
%if !%with_isisd
/sbin/service isisd stop >/dev/null 2>&1 || :
%endif
/sbin/chkconfig --del isisd >/dev/null 2>&1 || :
/sbin/chkconfig --del ripd >/dev/null 2>&1 || :
/sbin/chkconfig --del bgpd >/dev/null 2>&1 || :
/sbin/chkconfig --del ospfd >/dev/null 2>&1 || :
/sbin/chkconfig --del watchquagga >/dev/null 2>&1 || :
%if !%with_ipv6
/sbin/service ospf6d stop >/dev/null 2>&1 || :
/sbin/service ripngd stop >/dev/null 2>&1 || :
%endif
/sbin/chkconfig --del ospf6d >/dev/null 2>&1 || :
/sbin/chkconfig --del ripngd >/dev/null 2>&1 || :
/bin/systemctl try-restart zebra.service >/dev/null 2>&1 || :
%if %with_isisd
/bin/systemctl try-restart isisd.service >/dev/null 2>&1 || :
%endif
/bin/systemctl try-restart ripd.service >/dev/null 2>&1 || :
/bin/systemctl try-restart bgpd.service >/dev/null 2>&1 || :
/bin/systemctl try-restart ospfd.service >/dev/null 2>&1 || :
%if %with_ipv6
/bin/systemctl try-restart ospf6d.service >/dev/null 2>&1 || :
/bin/systemctl try-restart ripngd.service >/dev/null 2>&1 || :
%endif
%triggerpostun -n %{name}-sysvinit -- %{name} < 0.99.18-6
/sbin/chkconfig --add zebra >/dev/null 2>&1 || :
%if %with_isisd
/sbin/chkconfig --add isisd >/dev/null 2>&1 || :
%endif
/sbin/chkconfig --add ripd >/dev/null 2>&1 || :
/sbin/chkconfig --add bgpd >/dev/null 2>&1 || :
/sbin/chkconfig --add ospfd >/dev/null 2>&1 || :
/sbin/chkconfig --add watchquagga >/dev/null 2>&1 || :
%if %with_ipv6
/sbin/chkconfig --add ospf6d >/dev/null 2>&1 || :
/sbin/chkconfig --add ripngd >/dev/null 2>&1 || :
%endif
%clean
rm -rf $RPM_BUILD_ROOT
%systemd_preun zebra.service
%systemd_preun isisd.service
%systemd_preun ripd.service
%systemd_preun ospfd.service
%systemd_preun bgpd.service
%systemd_preun ospf6d.service
%systemd_preun ripngd.service
%files
%defattr(-,root,root)
%doc AUTHORS COPYING
%doc zebra/zebra.conf.sample
%if %with_isisd
%doc isisd/isisd.conf.sample
%endif
%doc ripd/ripd.conf.sample
%doc bgpd/bgpd.conf.sample*
%doc ospfd/ospfd.conf.sample
%doc babeld/babeld.conf.sample
%if %with_ipv6
%doc ospf6d/ospf6d.conf.sample
%doc ripngd/ripngd.conf.sample
%endif
%doc doc/quagga.html
%doc doc/mpls
%doc ChangeLog INSTALL NEWS README REPORTING-BUGS SERVICES TODO
%if %quagga_user
%dir %attr(750,%quagga_user,%quagga_user) %{_sysconfdir}
%dir %attr(750,%quagga_user,%quagga_user) /var/log/quagga
%dir %attr(750,%quagga_user,%quagga_user) /var/run/quagga
%else
%dir %attr(750,root,root) %{_sysconfdir}
%dir %attr(750,root,root) /var/log/quagga
%dir %attr(755,root,root) /usr/share/info
%dir %attr(750,root,root) /var/run/quagga
%endif
%dir %attr(750,quagga,quagga) %{_sysconfdir}/quagga
%dir %attr(750,quagga,quagga) /var/log/quagga
%dir %attr(750,quagga,quagga) /var/run/quagga
%{_infodir}/*info*
%{_mandir}/man*/*
%exclude %{_mandir}/man*/watchquagga.*
%{_sbindir}/*
%exclude %{_sbindir}/watchquagga
%if %with_vtysh
%{_bindir}/*
%endif
%dir %{_libdir}
%{_libdir}/*.so.*
%if %with_pam
%config(noreplace) /etc/pam.d/quagga
%endif
%dir %{_libdir}/quagga
%{_libdir}/quagga/*.so.*
%config(noreplace) %attr(640,root,root) /etc/logrotate.d/quagga
%config(noreplace) /etc/sysconfig/quagga
%config(noreplace) /etc/tmpfiles.d/quagga.conf
/lib/systemd/system/*.service
%files sysvinit
%defattr(-,root,root)
%doc AUTHORS COPYING
%attr(755,root,root) /etc/rc.d/init.d/*
%{_mandir}/man*/watchquagga.*
%{_sbindir}/watchquagga
%config(noreplace) /etc/sysconfig/quagga
%{_tmpfilesdir}/quagga.conf
%{_unitdir}/*.service
%files contrib
%defattr(-,root,root)
%doc AUTHORS COPYING %attr(0644,root,root) tools
%files devel
%defattr(-,root,root)
%doc AUTHORS COPYING
%dir %{_libdir}
%{_libdir}/*.so
%dir %{_libdir}/quagga/
%{_libdir}/quagga/*.so
%dir %{_includedir}/quagga
%{_includedir}/quagga/*.h
%dir %{_includedir}/quagga/ospfd
%{_includedir}/quagga/ospfd/*.h
%if %with_ospfapi
%dir %{_includedir}/quagga/ospfapi
%{_includedir}/quagga/ospfapi/*.h
%endif
%changelog
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Jul 21 2019 Michal Ruprich <mruprich@redhat.com> - 1.2.4-10
- Adding conflict with frr
* Mon Jun 10 22:13:22 CET 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.2.4-9
- Rebuild for RPM 4.15
* Mon Jun 10 15:42:05 CET 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.2.4-8
- Rebuild for RPM 4.15
* Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.2.4-7
- Rebuild for readline 8.0
* Sat Feb 02 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jan 14 2019 Björn Esser <besser82@fedoraproject.org> - 1.2.4-5
- Rebuilt for libcrypt.so.2 (#1666033)
* Mon Dec 10 2018 Michal Ruprich <mruprich@redhat.com> - 1.2.4-4
- Resolves: #1611589 - Need to use {} around the environment variables in unit files
* Wed Jul 25 2018 Michal Ruprich <mruprich@redhat.com> - 1.2.4-3
- Removing tetex from dependencies
- Adding gcc to BuildRequires
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri May 04 2018 Michal Ruprich <mruprich@redhat.com> - 1.2.4-1
- New version 1.2.4
* Thu Feb 22 2018 Ondřej Lysoněk <olysonek@redhat.com> - 1.2.2-4
- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
certain forms of UPDATE message allowing to crash or potentially execute
arbitrary code
- Resolves: rhbz#1546008
- Fixed CVE-2018-5380 - bgpd can overrun internal BGP code-to-string
conversion tables potentially allowing crash
- Resolves: rhbz#1546006
- Fixed CVE-2018-5381 - Infinite loop issue triggered by invalid OPEN message
allows denial-of-service
- Resolves: rhbz#1546004
- Fixed CVE-2018-5378 - bgpd does not properly bounds check the data sent with
a NOTIFY allowing leak of sensitive data or crash
- Resolves: rhbz#1546009
* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.2.2-3
- Escape macros in %%changelog
* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 1.2.2-2
- Rebuilt for switch to libxcrypt
* Tue Nov 14 2017 Michal Ruprich <mruprich@redhat.com> - 1.2.2-1
- rebase to 1.2.2(#1504420)
- resolves #1462426 - Installing with dnf produces error /var/tmp/rpm-tmp.jMe0EE: line 44 [: too many arguments
- resolves #1509292 - CVE-2017-16227 quagga: Incorrect AS_PATH size calculation for long paths
* Fri Aug 11 2017 Igor Gnatenko <ignatenko@redhat.com> - 1.2.1-6
- Rebuilt after RPM update (№ 3)
* Thu Aug 10 2017 Igor Gnatenko <ignatenko@redhat.com> - 1.2.1-5
- Rebuilt for RPM soname bump
* Thu Aug 10 2017 Igor Gnatenko <ignatenko@redhat.com> - 1.2.1-4
- Rebuilt for RPM soname bump
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon May 29 2017 Michal Ruprich <mruprich@redhat.com> - 1.2.1-1
- rebase to 1.2.1(#1431309)
- added quagga to quaggavt group - resolves #1434028
- enabled pimd and nhrpd
- fix bogus date in changelog
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Wed Feb 01 2017 Michal Sekletar <msekleta@redhat.com> - 1.1.1-1
- rebase to 1.1.1 (#1415873, #1416017)
* Thu Jan 12 2017 Igor Gnatenko <ignatenko@redhat.com> - 1.1.0-2
- Rebuild for readline 7.x
* Thu Oct 20 2016 Michal Sekletar <msekleta@redhat.com> - 1.1.0-1
- rebase to 1.1.0 (#1316324, #1316572, #1331373, #1386110)
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.24.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Mon Jul 27 2015 Richard W.M. Jones <rjones@redhat.com> - 0.99.24.1-2
- Bump version to rebuild against new RPM in Rawhide.
* Mon Jun 29 2015 Michal Sekletar <msekleta@redhat.com> - 0.99.24.1-1
- update to 0.99.24.1 (#1114339)
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99.22.4-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99.22.4-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99.22.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Mon May 26 2014 Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-4
- raise privileges before creating netlink socket (#1097684)
* Wed Jan 29 2014 Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-3
- fix source url
- fix date in the changelog
* Mon Jan 06 2014 Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-2
- reference pidfiles in service files (#1025798)
* Fri Sep 13 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-1
- update to 0.99.22.4
* Sat Aug 03 2013 Petr Pisar <ppisar@redhat.com> - 0.99.22.3-2
- Perl 5.18 rebuild
* Tue Jul 30 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.3-1
- update to 0.99.22.3
* Tue Jul 30 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.2-2
- enabled hardened build
* Tue Jul 30 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.2-1
- update to 0.99.22.2
* Mon Jul 22 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-9
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532
* Thu Jul 18 2013 Petr Pisar <ppisar@redhat.com> - 0.99.22.1-8
- Perl 5.18 rebuild
* Fri Jun 21 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-7
- quagga is service which might implement networking, thus it should not have
WantedBy=network.target in its systemd configuration
- resolves: #976883
* Mon Jun 10 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-6
- obsolete quagga-sysvinit subpackage
- use macro to specify location where to install tmpfiles configuration file
- fix rpm scripts handling documentation in info format
* Thu Jun 06 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-5
- configure quagga using correct user
* Tue May 28 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-4
- call chmod on correct path
* Mon May 27 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-3
- build package with required compiler flags
* Fri May 17 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-2
- claim ownership of libdir/quagga directory
- fix dependencies
* Fri Apr 19 2013 Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-1
- update to 0.99.22.1
- install tmpfiles dropping configuration to proper location
- drop sysv subpackage and initscripts support
* Tue Mar 26 2013 Adam Tkac <atkac redhat com> - 0.99.22-2
- fix typo in ipv6.texi documentation
* Wed Feb 20 2013 Adam Tkac <atkac redhat com> - 0.99.22-1
- update to 0.99.22
- quagga-CVE-2012-1820.patch has been merged
- explicitly enable SMNP AgentX interface
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99.21-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Jul 27 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99.21-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jul 12 2012 Adam Tkac <atkac redhat com> 0.99.21-3
- build with -fno-strict-aliasing
* Thu Jun 07 2012 Adam Tkac <atkac redhat com> 0.99.21-2
- fix CVE-2012-1820
@ -498,11 +464,11 @@ rm -rf $RPM_BUILD_ROOT
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99.17-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Thu Dec 08 2010 Jiri Skala <jskala@redhat.com> - 0.99.17-4
* Wed Dec 08 2010 Jiri Skala <jskala@redhat.com> - 0.99.17-4
- #656681 - using tmpfiles.d
* Thu Dec 02 2010 Jiri Skala <jskala@redhat.com> - 0.99.17-3
- fixes #656681 - using %ghost on files in /var/run and /var/lock
- fixes #656681 - using %%ghost on files in /var/run and /var/lock
- removed unused script from spec
- corrected installing /etc/pam.d
@ -524,7 +490,7 @@ rm -rf $RPM_BUILD_ROOT
* Thu Jul 01 2010 Jiri Skala <jskala@redhat.com> - 0.99.16-3
- fixes #609616 - does not adhere to Static Library Packaging Guidelines
* Wed Jun 11 2010 Jiri Skala <jskala@redhat.com> - 0.99.16-2
* Fri Jun 11 2010 Jiri Skala <jskala@redhat.com> - 0.99.16-2
- pam.d is disabled
* Wed Mar 17 2010 Jiri Skala <jskala@redhat.com> - 0.99.16-1

View File

@ -1 +1,2 @@
0980758b1865b9aa0c60975120bf3453 quagga-0.99.21.tar.xz
SHA512 (quagga-1.2.4.tar.gz) = 3e72440bcccfd3c1a449a62b7ff8623441256399a2bee0a39fa0a19694a5a78ac909c5c2128a24735bc034ea8b0811827293b480a2584a3a4c8ae36be9cf1fcd
SHA512 (quagga-1.2.4.tar.gz.asc) = 054f6159bf3e2ea396e696d6297b026d1322b17eba31826cf3ac42b5a43e924caef1d87bba481cc3c272b56aa5c64b3d5537a67693f99cafb560d216870fede3