gobgp (2.25.0-3ubuntu0.1+esm2) jammy-security; urgency=medium

  * SECURITY UPDATE: buffer overflow vulnerability
    - debian/patches/CVE-2023-46565-pre.patch: Allow testing multiple
      GoBGP instances on localhost
    - debian/patches/CVE-2023-46565.patch: Check Address and LocalAddress
      instead of RouterId in `server/fsm.go`
    - CVE-2023-46565

  * SECURITY UPDATE: denial of service                                     
    - debian/patches/CVE-2025-43970.patch: pkg/packet/mrt: fix parser to   
      check the input length                                               
    - debian/patches/CVE-2025-43972.patch: pkg/packet/bgp: fix flowspec    
      parser to check the input length                                     
    - debian/patches/CVE-2025-43973.patch: pkg/packet/rtr: fix parser to   
      check the input length
    - CVE-2025-43970
    - CVE-2025-43972
    - CVE-2025-43973

 -- Shishir Subedi <shishir.subedi@canonical.com>  Fri, 18 Jul 2025 13:07:50 +0545

gobgp (2.25.0-3ubuntu0.1+esm1) jammy-security; urgency=medium

  * No change rebuild due to golang-golang-x-net update

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 04 Mar 2025 13:04:53 -0330

gobgp (2.25.0-3ubuntu0.1) jammy-security; urgency=medium

  * No change rebuild due to golang-1.18 update. Note that this package
    was built with golang-1.17.

 -- Allen Huang <allen.huang@canonical.com>  Mon, 18 Nov 2024 18:51:31 +0000

gobgp (2.25.0-3build1) jammy; urgency=medium

  * No-change rebuild against Go 1.17

 -- William 'jawn-smith' Wilson <jawn-smith@ubuntu.com>  Tue, 30 Nov 2021 13:49:49 -0600

gobgp (2.25.0-3) unstable; urgency=medium

  * Team upload
  * d/control:
    - Update/correct Build-Depends and Depends
    - Switch golang-go -> golang-any

 -- Mathias Gibbens <mathias@calenhad.com>  Thu, 25 Nov 2021 23:45:16 +0100

gobgp (2.25.0-2) unstable; urgency=medium

  [ Ville Skyttä ]
  * d/gobgpd.service: use additional options from $GOBGPD_OPTIONS

  [ Vincent Bernat ]
  * d/tests: add a non-trivial autopkgtest

 -- Vincent Bernat <bernat@debian.org>  Thu, 08 Apr 2021 11:26:28 +0200

gobgp (2.25.0-1) unstable; urgency=medium

  * New upstream release.
  * d/lintian-overrides: remove
  * d/bash-completions: do not rename helper completion scripts
    (Closes: #985140)

 -- Vincent Bernat <bernat@debian.org>  Sat, 13 Mar 2021 17:57:01 +0100

gobgp (2.12.0-1) unstable; urgency=medium

  * New upstream release.
  * d/patches: remove patch applied upstream.

 -- Vincent Bernat <bernat@debian.org>  Sat, 01 Feb 2020 08:02:34 +0100

gobgp (2.11.0-1) unstable; urgency=medium

  * New upstream release.
  * d/control: adjust build-depends.
  * d/service: update systemd unit file to use notify and a dynamic user.
  * d/patches: patch to make tests work with more recent version of protobuf.
  * d/install: don't ship gobmp (removed by upstream).

 -- Vincent Bernat <bernat@debian.org>  Sun, 15 Dec 2019 13:18:00 +0100

gobgp (1.33-1) unstable; urgency=medium

  * New upstream release.
  * d/rules: fix rebuild of protobuf generated files.
  * d/patches: disable RPKI test requiring network access.

 -- Vincent Bernat <bernat@debian.org>  Thu, 05 Jul 2018 08:50:20 +0200

gobgp (1.32-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Tue, 05 Jun 2018 15:32:26 +0200

gobgp (1.31-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Mon, 07 May 2018 21:00:48 +0200

gobgp (1.30-1) unstable; urgency=medium

  [ Alexandre Viau ]
  * Point Vcs-* urls to salsa.debian.org.

  [ Vincent Bernat ]
  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Mon, 16 Apr 2018 10:23:36 +0200

gobgp (1.29-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Fri, 16 Mar 2018 14:38:15 +0100

gobgp (1.28-1) unstable; urgency=medium

  * New upstream release.
  * d/patches: add patch to use old signature for uuid.NewV4().

 -- Vincent Bernat <bernat@debian.org>  Sat, 10 Feb 2018 16:30:20 +0100

gobgp (1.27-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Sat, 06 Jan 2018 14:03:21 +0100

gobgp (1.26-1) unstable; urgency=medium

  * New upstream release.
  * d/control: do not put golang-* package in golang section.
  * d/control: bump Standards-Version.
  * d/install: also ships gobmpd.

 -- Vincent Bernat <bernat@debian.org>  Tue, 12 Dec 2017 15:13:49 +0100

gobgp (1.25-1) unstable; urgency=medium

  * New upstream release.
  * d/control: switch priority to optional.
  * d/control: put golang-* package in golang section.

 -- Vincent Bernat <bernat@debian.org>  Sat, 11 Nov 2017 21:25:11 +0100

gobgp (1.24-1) unstable; urgency=medium

  * New upstream release.
  * d/control: bump Standards-Version.
  * d/control: no build-depends on dh-systemd.

 -- Vincent Bernat <bernat@debian.org>  Sat, 07 Oct 2017 08:40:52 +0200

gobgp (1.23-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Thu, 07 Sep 2017 08:04:57 +0200

gobgp (1.22-1) unstable; urgency=medium

  * New upstream release.
  * d/watch: update to take the source tarball only.
  * d/rules: install documentation before running tests.
  * d/control: bump Standards-Version.

 -- Vincent Bernat <bernat@debian.org>  Tue, 08 Aug 2017 18:17:25 +0200

gobgp (1.21-1) unstable; urgency=medium

  * New upstream release.
  * Upload to unstable.
  * Build-Depends on golang-github-sirupsen-logrus-dev (>= 0.11.0-2~) due
    to capitalization change.

 -- Vincent Bernat <bernat@debian.org>  Tue, 04 Jul 2017 10:51:54 +0200

gobgp (1.20-1) experimental; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Mon, 05 Jun 2017 06:20:42 +0200

gobgp (1.19-1) experimental; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Wed, 24 May 2017 11:09:04 +0200

gobgp (1.18-1) experimental; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Thu, 13 Apr 2017 09:40:06 +0200

gobgp (1.17-1) experimental; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Wed, 15 Mar 2017 09:09:19 +0100

gobgp (1.15-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Sun, 08 Jan 2017 17:48:49 +0100

gobgp (1.14-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Sun, 25 Dec 2016 17:27:10 +0100

gobgp (1.13-1) unstable; urgency=medium

  * New upstream release.
    - Fix FTBFS on 32-bit archs due to overflow. Closes: #840031.

 -- Vincent Bernat <bernat@debian.org>  Sun, 13 Nov 2016 18:57:54 +0100

gobgp (1.12-1) unstable; urgency=medium

  * New upstream release.
    - Fix FTBFS on i386 due to the use of syscall.SYS_SETSOCKOPT.
      Closes: #836805

 -- Vincent Bernat <bernat@debian.org>  Fri, 07 Oct 2016 18:00:12 +0200

gobgp (1.11-1) unstable; urgency=medium

  * New upstream release.

 -- Vincent Bernat <bernat@debian.org>  Sat, 17 Sep 2016 10:06:46 +0200

gobgp (1.10-1) unstable; urgency=medium

  * Initial release (Closes: #825183)

 -- Vincent Bernat <bernat@debian.org>  Fri, 02 Sep 2016 14:06:23 +0200
