search

bisdn / meta-switch

MIT License
4 stars 2 forks source link

frr: fix CVEs CVE-2023-4675{2,3} and CVE-2023-4723{4,5} #177

Closed KanjiMonster closed 8 months ago

KanjiMonster commented 8 months ago

Add patches fixing CVE CVE-2023-46752, CVE-2023-46753, CVE-2023-47234, and CVE-2023-47235 to FRR 9.0.

Patch order is commit order, not CVE numerical order, to avoid fuzz / need for rebasing of the patches.

References: https://nvd.nist.gov/vuln/detail/CVE-2023-46752 https://nvd.nist.gov/vuln/detail/CVE-2023-46753 https://nvd.nist.gov/vuln/detail/CVE-2023-47234 https://nvd.nist.gov/vuln/detail/CVE-2023-47235

Based on https://patchwork.yoctoproject.org/project/oe/patch/20231122093934.117102-1-jonas.gorski@bisdn.de/

KanjiMonster commented 8 months ago

Run tested on AS4630 with bgp-ipv4 and bgp-ipv6 tests.