openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File project.diff of Package frr (Revision a2bbcc8f4dfb2c6519ff5dce5150b69d)

Currently displaying revision a2bbcc8f4dfb2c6519ff5dce5150b69d , Show latest

--- frr.changes.orig
+++ frr.changes
@@ -1,4 +1,14 @@
 -------------------------------------------------------------------
+Mon Oct 30 12:38:21 UTC 2023 - Marius Tomaschewski <mt@suse.com>
+
+- Apply upstream fix for a crash due to a crafted BGP UPDATE message
+  (CVE-2023-46753,bsc#1216626,https://github.com/FRRouting/frr/pull/14655/commits/21418d64af11553c402f932b0311c812d98ac3e4).
+  [+ 0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch]
+- Apply upstream fix for a crash due to mishandled malformed
+  MP_REACH_NLRI data (CVE-2023-46752,bsc#1216627,https://github.com/FRRouting/frr/pull/14645/commits/b08afc81c60607a4f736f418f2e3eb06087f1a35).
+  [+ 0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch]
+
+-------------------------------------------------------------------
 Tue Sep 12 13:40:19 UTC 2023 - Marius Tomaschewski <mt@suse.com>
 
 - Apply upstream fix for NULL pointer dereference due to processing
--- frr.spec.orig
+++ frr.spec
@@ -51,6 +51,8 @@ Patch9:         0009-bgpd-Do-not-process
 Patch10:        0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch
 Patch11:        0011-babeld-fix-11808-to-avoid-infinite-loops.patch
 Patch12:        0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
+Patch13:        0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
+Patch14:        0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  bison >= 2.7
@@ -200,6 +202,8 @@ developing OSPF-API and frr applications
 %patch10 -p1
 %patch11 -p1
 %patch12 -p1
+%patch13 -p1
+%patch14 -p1
 
 %build
 # GCC LTO objects must be "fat" to avoid assembly errors

Places

File project.diff of Package frr (Revision a2bbcc8f4dfb2c6519ff5dce5150b69d)

Places