openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File project.diff of Package frr (Revision 46a895852ae6fcc208dd1c572f9e3b43)

Currently displaying revision 46a895852ae6fcc208dd1c572f9e3b43 , Show latest

--- frr.changes.orig
+++ frr.changes
@@ -1,4 +1,12 @@
 -------------------------------------------------------------------
+Tue Sep 12 13:40:19 UTC 2023 - Marius Tomaschewski <mt@suse.com>
+
+- Apply upstream fix for NULL pointer dereference due to processing
+  of malformed requests with no attributes in bgp_nlri_parse_flowspec
+  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
+  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]
+
+-------------------------------------------------------------------
 Wed Aug 30 17:15:35 UTC 2023 - Marius Tomaschewski <mt@suse.com>
 
 - Removed protobuf-c BuildRequires (source package name) breaking
--- frr.spec.orig
+++ frr.spec
@@ -50,6 +50,7 @@ Patch8:         0008-bgpd-Don-t-read-the
 Patch9:         0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch
 Patch10:        0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
 Patch11:        0011-babeld-fix-11808-to-avoid-infinite-loops.patch
+Patch12:        0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  bison >= 2.7
@@ -198,6 +199,7 @@ developing OSPF-API and frr applications
 %patch9 -p1
 %patch10 -p1
 %patch11 -p1
+%patch12 -p1
 
 %build
 # GCC LTO objects must be "fat" to avoid assembly errors

Places

File project.diff of Package frr (Revision 46a895852ae6fcc208dd1c572f9e3b43)

Places