Browse Source

package/frr: security bump to version 8.5.6

8.5.5 fixes the following security issues:

- CVE-2024-31948: bgpd: Fix error handling when receiving BGP Prefix SID
  attribute
  https://github.com/FRRouting/frr/pull/15628/commits/ba6a8f1a31e1a88df2de69ea46068e8bd9b97138

- CVE-2024-31950: ospfd: Solved crash in RI parsing with OSPF TE
  https://github.com/FRRouting/frr/pull/15674/commits/f69d1313b19047d3d83fc2b36a518355b861dfc4

- CVE-2024-31951: ospfd: Correct Opaque LSA Extended parser
  https://github.com/FRRouting/frr/pull/15674/commits/5557a289acdaeec8cc63ffc97b5c2abf6dee7b3a

8.5.6 fixes the following security issues:

- CVE-2024-44070: bgpd: Check the actual remaining stream length before taking TLV value
  https://github.com/FRRouting/frr/pull/16497/commits/0998b38e4d61179441f90dd7e7fd6a3a8b7bd8c5

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard 8 tháng trước cách đây
mục cha
commit
73f2172fd6
2 tập tin đã thay đổi với 2 bổ sung2 xóa
  1. 1 1
      package/frr/frr.hash
  2. 1 1
      package/frr/frr.mk

+ 1 - 1
package/frr/frr.hash

@@ -1,3 +1,3 @@
 # Locally calculated
 # Locally calculated
-sha256  7ae9d8bafc65bb5d0f21061ac61dbc6cf93b2b05a5dae9e5eec72ed42388551e  frr-8.5.4.tar.gz
+sha256  5f3a32e66efdf2628548165d10327688847443c342788b31c4ea98368cfacbf8  frr-8.5.6.tar.gz
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING

+ 1 - 1
package/frr/frr.mk

@@ -4,7 +4,7 @@
 #
 #
 ################################################################################
 ################################################################################
 
 
-FRR_VERSION = 8.5.4
+FRR_VERSION = 8.5.6
 FRR_SITE = $(call github,FRRouting,frr,frr-$(FRR_VERSION))
 FRR_SITE = $(call github,FRRouting,frr,frr-$(FRR_VERSION))
 FRR_LICENSE = GPL-2.0
 FRR_LICENSE = GPL-2.0
 FRR_LICENSE_FILES = COPYING
 FRR_LICENSE_FILES = COPYING