openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File project.diff of Package frr (Revision 43374183c378be79c69e291757d8e066)

Currently displaying revision 43374183c378be79c69e291757d8e066 , Show latest

--- frr.changes.orig
+++ frr.changes
@@ -1,4 +1,20 @@
 -------------------------------------------------------------------
+Wed Aug 30 12:51:08 UTC 2023 - Marius Tomaschewski <mt@suse.com>
+
+- Apply upstream fix for bgpd: Don't read initial byte of the ORF
+  header in an ahead-of-stream situation (CVE-2023-41360,
+  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
+  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
+- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
+  length is zero (CVE-2023-41358,bsc#1214735,
+  https://github.com/FRRouting/frr/pull/14260)
+  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
+- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
+  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
+  https://github.com/FRRouting/frr/pull/14290)
+  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
+
+-------------------------------------------------------------------
 Mon May 15 08:01:39 UTC 2023 - Marius Tomaschewski <mt@suse.com>
 
 - Apply upstream fix for denial of service via the bgp_capability_llgr()
--- frr.spec.orig
+++ frr.spec
@@ -46,6 +46,9 @@ Patch4:         0004-tools-remove-backsl
 Patch5:         0005-root-ok-in-account-frr.pam.patch
 Patch6:         0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch
 Patch7:         0007-bgpd-Ensure-stream-received-has-enough-data.patch
+Patch8:         0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch
+Patch9:         0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
+Patch10:        0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  bison >= 2.7
@@ -191,6 +194,9 @@ developing OSPF-API and frr applications
 %patch5 -p1
 %patch6 -p1
 %patch7 -p1
+%patch8 -p1
+%patch9 -p1
+%patch10 -p1
 
 %build
 # GCC LTO objects must be "fat" to avoid assembly errors

Places

File project.diff of Package frr (Revision 43374183c378be79c69e291757d8e066)

Places