diff options
| author | Daniel Baumann <daniel@debian.org> | 2024-12-26 11:29:28 +0100 |
|---|---|---|
| committer | Daniel Baumann <daniel@debian.org> | 2024-12-26 22:03:09 +0100 |
| commit | 9aa3b1d0a67a841d08278e79a969439999f021f6 (patch) | |
| tree | e9ee178aa1776f47fb9da92dc5fb67420b728f4e | |
| parent | Removing CVE-2023-41358.patch, included in 8.4.5. (diff) | |
| download | frr-9aa3b1d0a67a841d08278e79a969439999f021f6.tar.xz frr-9aa3b1d0a67a841d08278e79a969439999f021f6.zip | |
Removing CVE-2023-41360.patch, included in 8.4.5.
Signed-off-by: Daniel Baumann <daniel@debian.org>
| -rw-r--r-- | debian/patches/CVE-2023-41360.patch | 30 | ||||
| -rw-r--r-- | debian/patches/series | 1 |
2 files changed, 0 insertions, 31 deletions
diff --git a/debian/patches/CVE-2023-41360.patch b/debian/patches/CVE-2023-41360.patch deleted file mode 100644 index fd37714f..00000000 --- a/debian/patches/CVE-2023-41360.patch +++ /dev/null @@ -1,30 +0,0 @@ -From 3515178de4a56d66ed948a774efcbe4a854e1ca7 Mon Sep 17 00:00:00 2001 -From: Donatas Abraitis <donatas@opensourcerouting.org> -Date: Sun, 20 Aug 2023 22:15:27 +0300 -Subject: [PATCH] bgpd: Don't read the first byte of ORF header if we are ahead - of stream - -Reported-by: Iggy Frankovic iggyfran@amazon.com -Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org> -(cherry picked from commit 9b855a692e68e0d16467e190b466b4ecb6853702) ---- - bgpd/bgp_packet.c | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/bgpd/bgp_packet.c b/bgpd/bgp_packet.c -index a2959ef6e..60f1dcbcd 100644 ---- a/bgpd/bgp_packet.c -+++ b/bgpd/bgp_packet.c -@@ -2408,7 +2408,8 @@ static int bgp_route_refresh_receive(struct peer *peer, bgp_size_t size) - * and 7 bytes of ORF Address-filter entry from - * the stream - */ -- if (*p_pnt & ORF_COMMON_PART_REMOVE_ALL) { -+ if (p_pnt < p_end && -+ *p_pnt & ORF_COMMON_PART_REMOVE_ALL) { - if (bgp_debug_neighbor_events(peer)) - zlog_debug( - "%pBP rcvd Remove-All pfxlist ORF request", --- -2.39.2 - diff --git a/debian/patches/series b/debian/patches/series deleted file mode 100644 index 4f62eb5b..00000000 --- a/debian/patches/series +++ /dev/null @@ -1 +0,0 @@ -CVE-2023-41360.patch |