meta-openembedded

mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-13 17:39:57 +00:00

Files

T

Yi Zhao 32e47b26e9 frr: Security fix CVE-2023-3748

CVE-2023-3748:
A flaw was found in FRRouting when parsing certain babeld unicast hello
messages that are intended to be ignored. This issue may allow an
attacker to send specially crafted hello messages with the unicast flag
set, the interval field set to 0, or any TLV that contains a sub-TLV
with the Mandatory flag set to enter an infinite loop and cause a denial
of service.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-3748

Patch from:
https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ee1026ab77)
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2023-08-31 08:49:13 -04:00

babeld

babeld: upgrade 1.12 -> 1.12.1

2022-05-24 08:39:45 -07:00

dante

dante: Add -P to preprocessor flags

2023-01-29 21:09:39 -08:00

freediameter

freediameter: fix typo and old overide syntax

2023-05-07 12:31:52 -04:00

frr

frr: Security fix CVE-2023-3748