frr (6.0.2-2+deb10u1.lnd.2) security; urgency=high

  * Fix CVE-2022-26127: Improper Restriction of Operations within the Bounds of a Memory Buffer
        CVE-2022-26128: Improper Restriction of Operations within the Bounds of a Memory Buffer
        CVE-2022-26129: Improper Restriction of Operations within the Bounds of a Memory Buffer
        CVE-2023-38406: Improper Handling of Exceptional Conditions
        CVE-2023-38407: Buffer overread
        CVE-2023-41909: NULL pointer dereference
        CVE-2023-46753: Incorrect Authorization
        CVE-2024-31948: Improper Validation of Specified Type of Input
        CVE-2024-31949: Loop with Unreachable Exit Condition
        CVE-2023-41358: NULL Pointer Dereference

 -- Loongson <service@loongnix.cn>  Thu, 25 Sep 2025 07:56:32 +0000

frr (6.0.2-2+deb10u1.lnd.1) buster; urgency=high

  * Fix CVE-2022-37032: An out-of-bounds read in the BGP daemon

 -- Liangliang Zhai <zhailiangliang@loongson.cn>  Tue, 28 Mar 2023 16:11:00 +0800

frr (6.0.2-2+deb10u1.1) buster; urgency=medium

  * Non-maintainer upload.
  * rebuild for mstrict-align

 -- root <root@loongson-pc>  Fri, 28 Jan 2022 12:34:52 +0800

frr (6.0.2-2+deb10u1) buster; urgency=medium

  * extended next hop capability not working: add upstream patches:
    - Add_peer_action_for_PEER_FLAG_IFPEER_V6ONLY_flag.patch.
    - interface_based_peers_should_automatically_override_it_s_peer_group.patch

 -- Thomas Goirand <zigo@debian.org>  Tue, 07 Jan 2020 13:21:50 +0100

frr (6.0.2-2) unstable; urgency=medium

  * remove bogus libjson0 build-dep (closes: #921349)
  * fix broken systemd dependency spec
  * add proper Conflicts: for quagga and pimd (closes: #921376)

 -- David Lamparter <equinox-debian@diac24.net>  Mon, 04 Feb 2019 22:16:07 +0100

frr (6.0.2-1) unstable; urgency=medium

  * Packaging has been more or less completely reworked, based off the old
    Quagga packaging that hung around in git.  Refer to "changelog-auto.in"
    in the source root directory for the old changelog.
  * Initial release of FRR for Debian. (closes: #863249)

 -- David Lamparter <equinox-debian@diac24.net>  Sun, 27 Jan 2019 17:27:02 +0100
