BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-702902f388 2025-10-01 15:00:59.894579+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 41 Version : 3.1.4 Release : 1.fc41 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-702902f388' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-f6b553e67d 2025-10-01 14:43:51.750536+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 42 Version : 3.1.4 Release : 1.fc42 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f6b553e67d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-182c305561 2025-10-01 00:14:58.043524+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 43 Version : 3.1.4 Release : 1.fc43 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-182c305561' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for bird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2180-1 Rating: moderate References: #1150108 Cross-References: CVE-2019-16159 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bird fixes the following issues: - CVE-2019-16159: Fixed a stack-based buffer overflow via administrative shutdown communication messages. (bnc#1150108) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2180=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): bird-1.6.8-bp151.2.3.1 bird-common-1.6.8-bp151.2.3.1 bird-doc-1.6.8-bp151.2.3.1 bird6-1.6.8-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16159.html https://bugzilla.suse.com/1150108 -- . openSUSE Security Announcement: Addresses critical flaw in Firefox buffer overflow. Essential information enclosed.. openSUSE Update, bird Security Fix, buffer Overflow Patch. . LinuxSecurity.com Team
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for bird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2178-1 Rating: moderate References: #1150108 Cross-References: CVE-2019-16159 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bird fixes the following issues: - CVE-2019-16159: Fixed a stack-based buffer overflow via administrative shutdown communication messages. (bnc#1150108) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2178=1 Package List: - openSUSE Leap 15.1 (x86_64): bird-1.6.8-lp151.2.3.1 bird-common-1.6.8-lp151.2.3.1 bird-debuginfo-1.6.8-lp151.2.3.1 bird-debugsource-1.6.8-lp151.2.3.1 bird-doc-1.6.8-lp151.2.3.1 bird6-1.6.8-lp151.2.3.1 bird6-debuginfo-1.6.8-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16159.html https://bugzilla.suse.com/1150108 -- . New patch released for openSUSE Sparrow, addressing notable buffer overflow vulnerability with crucial instructions provided.. openSUSE Update, bird Security Patch, stack buffer overflow, administrative shutdown fix. . LinuxSecurity.com Team
Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-8f0d2429d3 2018-12-07 02:13:26.114657 --------------------------------------------------------------------------------Name : bird Product : Fedora 28 Version : 1.6.4 Release : 2.fc28 URL : https://bird.network.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is dynamic routing daemon supporting IPv4 and IPv6 versions of routing protocols BGP, RIP and OSPF. This package contains IPv4 version. --------------------------------------------------------------------------------Update Information: Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root --------------------------------------------------------------------------------ChangeLog: * Mon Nov 12 2018 Stanislav Kozina - 1.6.4-2 - bird should run under bird user and group rather than root (#1397574) - bird should run in foreground (#1285672) * Mon Nov 12 2018 Stanislav Kozina - 1.6.4-1 - Update bird to 1.6.4 (#1642737) --------------------------------------------------------------------------------References: [ 1 ] Bug #1285672 - Bird should start in foreground in the systemd unit https://bugzilla.redhat.com/show_bug.cgi?id=1285672 [ 2 ] Bug #1642737 - bird-1.6.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1642737 [ 3 ] Bug #1588771 - CVE-2018-12066 bird: Stack overflow in BGP mask expressions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1588771 [ 4 ] Bug #1397574 - Bird should drop privileges https://bugzilla.redhat.com/show_bug.cgi?id=1397574 --------------------------------------------------------------------------------This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-8f0d2429d3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.