Merge remote-tracking branch 'origin/stable-v2.16' into HEAD

diff --cc NEWS
index f91c12cdc9c7a38948629463d5aafc97837d0c73,3a55f68d840ca4be552e4703d348f80ff7fc4940..1fef9b0ed408192aa606acb90ba8fd8702c76b3e
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -1,59 -1,11 +1,67 @@@
+ Version 2.16.1 (2025-01-10)
+   o ASPA: fixed parser bug in static protocol
+   o ASPA: fixed static protocol reconfiguration
+   o Babel: fixed seqno comparison
+   o BSD: fixed onlink flag assumption with Netlink
+   o Fixed memory alignment issues
+   o Fixed possible rte src collisions in L3VPN
+ 
 +Version 3.0.0 (2024-12-17)
 +  - from 2.16
 +    o Multithreaded execution
 +    o Decoupled exports from imports
 +    o Unified route attribute names
 +    o Slightly different log format
 +    o Separate reload command for filters and protocols
 +    o BGP: Export tables show the state as on wire
 +    o Lots of internal changes
 +  - from 3.0alpha3
 +    o Merged changes from 2.16
 +    o BMP and MRT converted to the new API and working
 +    o Internal protocol state journal
 +    o Optimized table journal cleanup
 +    o Fixed "show route export"
 +    o Fixed minor bugs
 +
 +Version 3.0alpha3 (2024-07-01)
 +  o Merged 2.15.1
 +  o Fixed major issues with channel reloads
 +  o Fixed data inconsistencies in many corner cases
 +  o Fixed internal scheduler corner cases
 +  o MRT and BMP still switched off
 +  o Expected one more alpha before stable
 +
 +Version 3.0alpha2 (2023-05-11)
 +  o Fixed memory leaks and use-after free bugs
 +  o Simple thread work balancing
 +  o MRT switched off
 +  o Slow kernel route synchronization to be fixed later
 +
 +Version 3.0alpha1 (2023-04-18)
 +  o Worker threads for BGP, Pipe, RPKI and BFD
 +  o Configurable number of threads
 +  o Asynchronous route export
 +  o Flat attribute structure
 +  o Inline import tables
 +  o Export tables merged with BGP prefix / attribute buckets
 +  o Fixed ROA check locking inversion in route table dumps
 +  o MRT switched off
 +
 +Version 3.0-alpha0 (2022-02-07)
 +  o Removal of fixed protocol-specific route attributes
 +  o Asynchronous route export
 +  o Explicit table import / export hooks
 +  o Partially lockless route attribute cache
 +  o Thread-safe resource management
 +  o Thread-safe interface notifications
 +  o Thread-safe protocol API
 +  o Adoption of BFD IO loop for general use
 +  o Parallel Pipe protocol
 +  o Parallel RPKI protocol
 +  o Parallel BGP protocol
 +  o Lots of refactoring
 +  o Bugfixes and improvements as they came along
 +
  Version 2.16 (2024-12-04)
    o BFD: Set password per session
    o BFD: Accept zero checksum for IPv6-UDP