linux/meta-openembedded.git/meta-networking/recipes-protocols/frr, branch nanbield

frr: fix CVEs CVE-2023-4675{2,3} and CVE-2023-4723{4,5}

2024-01-05T12:52:17+00:00

Add patches fixing CVE CVE-2023-46752, CVE-2023-46753, CVE-2023-47234, and CVE-2023-47235 to FRR 9.0. Patch order is commit order, not CVE numerical order, to avoid fuzz / need for rebasing of the patches. References: https://nvd.nist.gov/vuln/detail/CVE-2023-46752 https://nvd.nist.gov/vuln/detail/CVE-2023-46753 https://nvd.nist.gov/vuln/detail/CVE-2023-47234 https://nvd.nist.gov/vuln/detail/CVE-2023-47235 Signed-off-by: Jonas Gorski Signed-off-by: Khem Raj (cherry picked from commit 00e928bcb7e933ada8e67f3bfa887988d1ca9d61) Signed-off-by: Armin Kuster

frr: upgrade 8.4.4 -> 9.0.1

2023-09-22T14:36:16+00:00

Upgrade FRR to 9.0.1: * drop all existing patches since they are included in 9.0.1 * add a patch fixing (harmless) error messages in log * license files moved to doc/licenses * protobuf-c-native (for protoc) and protobuf-c are now needed Changelogs: https://github.com/FRRouting/frr/releases/tag/frr-9.0.1 https://github.com/FRRouting/frr/commit/31ed3dd753d62b5d8916998bc32814007e91364b https://github.com/FRRouting/frr/releases/tag/frr-9.0 https://github.com/FRRouting/frr/commit/2863e7efbcd0cbfbd41d3be04c660d77df65d0ea Signed-off-by: Jonas Gorski Signed-off-by: Khem Raj

frr: Fix CVE-2023-41358 and CVE-2023-41360

2023-09-07T15:22:43+00:00

Backport patches to fix CVE-2023-41358 and CVE-2023-41360. References: https://nvd.nist.gov/vuln/detail/CVE-2023-41358 https://nvd.nist.gov/vuln/detail/CVE-2023-41360 Signed-off-by: Robert Yang Signed-off-by: Khem Raj

frr: Security fix CVE-2023-3748

2023-08-28T15:55:26+00:00

CVE-2023-3748: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3748 Patch from: https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

frr: upgrade 8.4.2 -> 8.4.4

2023-06-28T20:53:12+00:00

ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.4 https://github.com/FRRouting/frr/commit/45e36c0c00a517ad1606135b18c5753e210cfc0d Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

frr: add CVE_PRODUCT

2023-05-09T04:45:53+00:00

The CVE_PRODUCT is frrouting in NVD database. Signed-off-by: Chen Qi Signed-off-by: Khem Raj

frr: support more arches

2023-03-08T15:12:23+00:00

Now frr can support more arches as libyang can be built on all arches. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

frr: add UPSTREAM_CHECK_GITTAGREGEX

2023-03-05T22:34:38+00:00

Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 9.0 INFO: Latest version's commit: 16c38045b1a84f899da473398779cc593d82d2bd Version 9.0 is a development tag[1]. After the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 8.4.2 INFO: Latest version's commit: 9e25d07412e92bdcd1f69c4755dc7564b23023c0 [1] https://github.com/FRRouting/frr/tags Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

frr: upgrade 8.4.1 -> 8.4.2

2023-02-07T15:01:21+00:00

ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.2 Per [1], update frr.pam to eliminate the warning issued by pam: vtysh[485]: pam_warn(frr:account): function=[pam_sm_acct_mgmt] flags=0 service=[frr] terminal=[] user=[root] ruser=[] rhost=[] [1] https://github.com/FRRouting/frr/commit/6031b8a3224cde14fd1df6e60855310f97942ff9 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

frr: upgrade 8.3.1 -> 8.4.1

2022-12-14T16:22:04+00:00

Drop backport patches. ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.1 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj