openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File project.diff of Package frr (Revision e0c67bcfed55fdd024b735b854b4befd)

Currently displaying revision e0c67bcfed55fdd024b735b854b4befd , Show latest

--- frr.changes.orig
+++ frr.changes
@@ -1,4 +1,22 @@
 -------------------------------------------------------------------
+Mon Dec  4 09:11:46 UTC 2023 - Marius Tomaschewski <mt@suse.com>
+
+- Apply upstream fix for a crash on malformed BGP UPDATE message
+  with an EOR, because the presence of EOR does not lead to a
+  treat-as-withdraw outcome (CVE-2023-47235,1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
+  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
+- Apply upstream fix for a crash on crafted BGP UPDATE message with
+  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
+  bsc#1216897,ttps://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
+  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
+- Apply upstream fix for attempts to read beyond the end of the
+  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
+  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
+- Apply upstream fix for an nlri length of zero mishandling, aka
+  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
+  [+ 0018-bgpd-Flowspec-overflow-issue.patch]
+
+-------------------------------------------------------------------
 Mon Oct 30 12:38:21 UTC 2023 - Marius Tomaschewski <mt@suse.com>
 
 - Apply upstream fix for a crash due to a crafted BGP UPDATE message
--- frr.spec.orig
+++ frr.spec
@@ -53,6 +53,10 @@ Patch11:        0011-babeld-fix-11808-to
 Patch12:        0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch
 Patch13:        0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch
 Patch14:        0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch
+Patch15:        0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch
+Patch16:        0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch
+Patch17:        0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch
+Patch18:        0018-bgpd-Flowspec-overflow-issue.patch
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  bison >= 2.7
@@ -204,6 +208,10 @@ developing OSPF-API and frr applications
 %patch12 -p1
 %patch13 -p1
 %patch14 -p1
+%patch15 -p1
+%patch16 -p1
+%patch17 -p1
+%patch18 -p1
 
 %build
 # GCC LTO objects must be "fat" to avoid assembly errors

Places

File project.diff of Package frr (Revision e0c67bcfed55fdd024b735b854b4befd)

Places