Fedora 31 FEDORA-2019-ff0f9ce167 Critical BIRD Buffer Overflow

BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border

Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open

Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel),

Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static

routes, inter-table protocol, command-line interface allowing on-line control

and inspection of the status of the daemon, soft reconfiguration as well as a

powerful language for route filtering.

BIRD 2.0.6 (2019-09-10) ======================= * RAdv: Solicited unicast RAs

* BGP: Optional Adj-RIB-Out * BGP: Extended optional parameters length *

Filter: Sets and set expressions in path masks * Several important bugfixes

[ 1 ] Bug #1751031 - CVE-2019-16159 bird: incorrect logical expressionwhen checking the validity of an input message leads to stack-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1751031

su -c 'dnf upgrade --advisory FEDORA-2019-ff0f9ce167' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/