bird-2.13.1-bp156.2.3

- add 'shadow' to Requires(pre)

- Update to version 2.13.1
  Bugfix release:
  * When a case statement in filter had an empty branch, it crashed
    BIRD.
  * fixed a bug in BGP Roles manifesting when the other party sent
    no capabilities at all.

- Update to version 2.13
  * Babel: IPv4 via IPv6 extension (RFC 9229)
  * Babel: Improve authentication on lossy networks
  * BGP: New 'allow bgp_med' option
  * BSD: Support for IPv4 routes with IPv6 nexthop on FreeBSD
  * Experimental BMP protocol implementation
  * Important bugfixes

- Update to version 2.0.12
  * Filter: New 'onlink' route attribute.
  * Compile-time option to use 4-way tries instead of 16-way ones.
  * Important bugfixes.

- Update to version 2.0.11
  * BGP roles (RFC 9234)
  * BGP: Keepalive time scaling
  * BGP: New 'min hold time' and 'min keepalive time' options
  * BGP: New 'next hop prefer global' option
  * Filter: For loops and direct recursion
  * Filter: Mixed declarations of local variables
  * Filter: Improved static type checks
  * Filter: Literal [] for empty set
  * Linux: Netlink KRT improvements
  * Memory management improvements
  * Many bugfixes

- Update to version 2.0.10
  * BGP performance improvements
  * BFD: New 'strict bind' option
  * RPKI: VRF support
  * Allow use of 240.0.0.0/4 as a private range
  * BIRD client uses exit status to report errors
  * Important bugfixes

- Update to version 2.0.9
  * BGP: Flowspec validation procedure
  * Babel: MAC authentication support
  * Routing table configuration blocks
  * Optional prefix trie in routing table for faster LPM/interval
    queries
  * CLI: New 'show route in <prefix>' command
  * Filter: Faster (16-way) prefix sets
  * Filter: MPLS label route attribute
  * Filter: Operators to pick community components
  * Filter: Operators to find minimum and maximum element of lists
  * BGP: New 'free bind' option
  * BGP: Log route updates that were changed to withdraws
  * BGP: Improved 'invalid next hop' error reporting
  * OSPF: Allow ifaces with host address as unnumbered PtP or PtMP
    ifaces
  * OSPF: All packets on PtP networks should be sent to
    AllSPFRouters address
  * Support for Blake2s and Blake2b hash functions
  * Security keys / passwords can be entered in hexadecimal digits
  * Memory statistics split into Effective and Overhead
  * New option 'netlink rx buffer' to specify netlink socket buffer
    size
  * Many bugfixes

- Drop ProtectClock hardening, can cause issues if other device acceess is needed

- Added hardening to systemd service(s). Modified:
  * bird.service

- Update to version 2.0.8
  Changes/Fixes:
  * Automatic channel reloads based on RPKI changes
  * Multiple static routes with the same network
  * Use bitmaps to keep track of exported routes
  * Per-channel debug flags
  * CLI commands show info from multiple protocols
  * Linux: IPv4 routes with IPv6 nexthops
  * Filter: Optimized redesign of prefix sets
  * Filter: Improved type checking of user filters
  * Filter: New src/dst accessors for Flowspec and SADR
  * Filter: New 'weight' route attribute
  * Filter: BGP path mask loop operator
  * Filter: Remove quitbird command
  * RIP: Demand circuit support (RFC 2091)
  * BGP: New 'allow as sets' and 'enforce first as' options
  * BGP: Support for BGP hostname capability
  * BGP: Support for MD5SIG with dynamic BGP
  * BFD: Optional separation of IPv4 / IPv6 BFD instances
  * BFD: Per-peer session options
  * RPKI: Allow build without libSSH
  * RPKI: New 'ignore max length' option
  * OSPF: Redesign of handling of unnumbered PtPs
  * OSPF: Allow key id 0 in authentication
  * Babel: Use onlink flag for routes with unreachable next hop
  * Many bugfixes
  Notes:
  * Automatic channel reloads based on RPKI changes are enabled
    by default, but require import table enabled when used in
    BGP import filter.
  * BIRD now uses bitmaps to keep track of exported routes
    instead of re-evaluation of export filters. That should
    improve speed and accuracy in route export handling during
    reconfiguration, but takes some more memory.
  * Per-channel debug logging and some CLI commands (like 'show
    ospf neighbors') defaulting to all protocol instances lead to
    some minor changes in log and CLI output. Caution is
    recommended when logs or CLI output are monitored by scripts.
- Drop not longer needed patches:
  * gcc10.patch
  * fix_test_for_bigendian_arch.patch

- Add patch to fix test on Big Endian architectures
  * fix_test_for_bigendian_arch.patch

- update to 2.0.2:
  o Integrated IPv4 + IPv6 design
  * many changes, see included NEWS for details
  * obsoletes separate bird6/bird-common subpackages
- remove bird-1.6.3_verbose.build.patch bufferoverflow.patch: obsolete
- add gcc10.patch (fix build with gcc 10), disable -fcommon again
- reenable fortify-source

- Add -fcommon to allow building against GCC10

- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs

- Update to version 1.6.6
  * Several bugfixes related to route propagation

- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes

- Kill off em dashes in summaries. Remove future
  aims from descriptions.

- Specfile cleanup

- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes

- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.

- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.

- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW

- ignore some warnings to make the output more readable

- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.

- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.

- add $BIRD_OPTIONS to the service files

- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again

- initial package