Skip to content

[FRR] Adding patches for CVE-2023-41358 CVE-2023-41909 CVE-2023-38802#45

Closed
DavidZagury wants to merge 1 commit into202205from
202205_frr-cve-fixes-0923
Closed

[FRR] Adding patches for CVE-2023-41358 CVE-2023-41909 CVE-2023-38802#45
DavidZagury wants to merge 1 commit into202205from
202205_frr-cve-fixes-0923

Conversation

@DavidZagury
Copy link
Copy Markdown
Owner

@DavidZagury DavidZagury commented Sep 20, 2023

Why I did it

To address 3CVEs from FRR CVE-2023-41358, CVE-2023-41909 & CVE-2023-38802.

Patch FRR commit CVE fixed
0032-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is-zero.patch FRRouting/frr@f291f1e CVE-2023-41358
0033-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit-withdrawal.patch FRRouting/frr@cc1a551 CVE-2023-41909
0034-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-attribute.patch FRRouting/frr@8a4a88c CVE-2023-38802
Work item tracking
  • Microsoft ADO (number only):

How I did it

Porting fixes as patches from FRR.

How to verify it

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111
  • 202205
  • 202211
  • 202305

Tested branch (Please provide the tested image version)

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

@DavidZagury DavidZagury force-pushed the 202205_frr-cve-fixes-0923 branch from f372e56 to 29cff73 Compare September 21, 2023 07:56
@DavidZagury DavidZagury closed this Oct 2, 2023
DavidZagury pushed a commit that referenced this pull request Dec 27, 2023
…ly (sonic-net#17572)

#### Why I did it
src/dhcprelay
```
* 5ae186f - (HEAD -> master, origin/master, origin/HEAD) [counter] Clear counter table when init (#45) (10 hours ago) [Yaqiang Zhu]
```
#### How I did it
#### How to verify it
#### Description for the changelog
DavidZagury pushed a commit that referenced this pull request Jan 15, 2024
5ae186f Yaqiang Zhu Tue Dec 19 12:05:15 2023 -0500 [counter] Clear counter table when init (#45)
DavidZagury pushed a commit that referenced this pull request Feb 7, 2024
sonic-dhcp-relay
5ae186f Yaqiang Zhu Tue Dec 19 12:05:15 2023 -0500 [counter] Clear counter table when init (#45)
40c6877 Jing Zhang Fri Nov 10 12:41:23 2023 -0800 [CodeQL] fix unmet dependency for build-swss-common (#44)

sonic-dhcpmon
7c55e50 StormLiangMS Thu Sep 14 09:57:06 2023 +0800 Merge pull request #13 from jcaiMR/dev/jcai_master_interface_counter
085a087 jcaiMR Mon Sep 11 09:17:03 2023 +0000 refine counting logic
DavidZagury pushed a commit that referenced this pull request Apr 28, 2025
… automatically (sonic-net#760)

#### Why I did it
src/sonic-platform-common
```
* 047e12b - (HEAD -> 202412, origin/202412) [code sync] Merge code from sonic-net/sonic-platform-common:202411 to 202412 (#45) (21 hours ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
DavidZagury pushed a commit that referenced this pull request Apr 28, 2025
…D automatically (sonic-net#1016)

#### Why I did it
src/sonic-sairedis
```
* 86d1413 - (HEAD -> 202412, origin/HEAD, origin/202412) Merge pull request #45 from r12f/code-sync-202412 (31 minutes ago) [Riff]
* 0fcc968 - Merge remote-tracking branch 'base/202411' into code-sync-202412 (13 hours ago) [r12f]
* 4048483 - Revert "Optimize counter polling interval by making it more accurate (sonic-net#1457) …" (sonic-net#1570) (2 weeks ago) [Kumaresh Perumal]
* 420d92f - Update build_and_install_module.sh to match newer Linux kernel version (sonic-net#1561) (4 weeks ago) [mssonicbld]
* e2d2ca6 - [vslib] SAI_KEY_VS_OPER_SPEED_IS_CONFIGURED_SPEED, SAI_PORT_ATTR_HOST_TX_READY_STATUS support (sonic-net#1553) (5 weeks ago) [mssonicbld]
* 8c17d4b - Revert "Do not enter vendor SAI critical section for counter polling/clearing operations (sonic-net#1450)" (sonic-net#1541) (7 weeks ago) [mssonicbld]
* 3df03e1 - Optimize counter polling interval by making it more accurate (sonic-net#1457) (sonic-net#1534) (7 weeks ago) [Stephen Sun]
* d884ff9 - [syncd] Move logSet logGet under mutex to prevent race condition (sonic-net#1520) (sonic-net#1538) (8 weeks ago) [Kamil Cudnik]
* ec8b3c3 - Fix pipeline errors related to rsyslogd and libswsscommon installation (sonic-net#1535) (8 weeks ago) [mssonicbld]
* 6b263b8 - [FC] Support Policer Counter (sonic-net#1533) (8 weeks ago) [mssonicbld]
* e53489e - [syncd] Update log level for bulk api (sonic-net#1532) (8 weeks ago) [Jianyue Wu]
* 7ae00e5 - Define bulk chunk size and bulk chunk size per counter ID (sonic-net#1528) (9 weeks ago) [mssonicbld]
* f35e743 - [nvidia] Skip SAI discovery on ports (sonic-net#1524) (2 months ago) [mssonicbld]
* bf049ed - Use sonictest pool instead of sonic-common and fix arm64 issue. (sonic-net#1516) (2 months ago) [mssonicbld]
* ffe371d - [syncd] Support bulk set in INIT_VIEW mode (sonic-net#1517) (2 months ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
DavidZagury pushed a commit that referenced this pull request Apr 28, 2025
…D automatically (sonic-net#1025)

#### Why I did it
src/sonic-sairedis
```
* 08c1e34 - (HEAD -> 202412, origin/HEAD, origin/202412) Merge pull request #46 from r12f/user/riffjiang/fix-merge (31 minutes ago) [Riff]
* a49942e - Revert "Merge pull request #45 from r12f/code-sync-202412" (38 minutes ago) [r12f]
```
#### How I did it
#### How to verify it
#### Description for the changelog
DavidZagury pushed a commit that referenced this pull request Aug 20, 2025
…sonic-net#23654)

#### Why I did it
src/dhcpmon
```
* 1cb6ced - (HEAD -> master, origin/master, origin/HEAD) Update clear_counter_timeout to fix clear counter issue (#45) (19 hours ago) [Yaqiang Zhu]
* 848304e - [build] Update to use libyang3 (#46) (4 days ago) [Yaqiang Zhu]
```
#### How I did it
#### How to verify it
#### Description for the changelog
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants