Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-8f225adf49 2026-06-17 08:41:51.002471+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 44 Version : 3.3.1 Release : 1.fc44 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics BGP: Fix several issues in Flowspec handling BMP/Nest: No refeed after listener or protocol restart MPLS: Fix crash on reconfiguring CS_DOWN channel OSPF: Fix handling of LLS data length field OSPF: Fix OOB read in authentication check OSPF: Fix OOB read in Router-LSA validation Proto: Fix regression in protocol enabling Channel: Fix refeeds and reloads during graceful restart Export: Mitigate duplicate withdrawals Filters: Fix crash when setting gateway on recursivenexthops Filters: Fix path matching when AS path is too long Table: Fix RCU double-anchor Table: Propagate thread group config into aux RCU: Catch leaks sooner See also: https://trubka.network.cz/pipermail/bird-users/2026-June/018790.html -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 10 2026 Robert Scheck - 3.3.1-1 - Upgrade to 3.3.1 (#2487252) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8f225adf49' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-702902f388 2025-10-01 15:00:59.894579+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 41 Version : 3.1.4 Release : 1.fc41 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-702902f388' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-f6b553e67d 2025-10-01 14:43:51.750536+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 42 Version : 3.1.4 Release : 1.fc42 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f6b553e67d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-182c305561 2025-10-01 00:14:58.043524+00:00 -------------------------------------------------------------------------------- Name : bird Product : Fedora 43 Version : 3.1.4 Release : 1.fc43 URL : https://bird.nic.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol (BGPv4), Routing Information Protocol (RIPv2, RIPng), Open Shortest Path First protocol (OSPFv2, OSPFv3), Babel Routing Protocol (Babel), Bidirectional Forwarding Detection (BFD), IPv6 router advertisements, static routes, inter-table protocol, command-line interface allowing on-line control and inspection of the status of the daemon, soft reconfiguration as well as a powerful language for route filtering. -------------------------------------------------------------------------------- Update Information: BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare bug with listening socket delay Pipe: Disabled statisticts for stopping pipe Hash: Read-only assertions ROA Aggregator: Fixed crash on multiwithdraw Protocol: Fixed broken state announcements -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2025 Robert Scheck - 3.1.4-1 - Upgrade to 3.1.4 (#2397496) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2397496 - bird-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2397496 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-182c305561' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for bird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2180-1 Rating: moderate References: #1150108 Cross-References: CVE-2019-16159 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bird fixes the following issues: - CVE-2019-16159: Fixed a stack-based buffer overflow via administrative shutdown communication messages. (bnc#1150108) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2180=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): bird-1.6.8-bp151.2.3.1 bird-common-1.6.8-bp151.2.3.1 bird-doc-1.6.8-bp151.2.3.1 bird6-1.6.8-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16159.html https://bugzilla.suse.com/1150108 -- . openSUSE Security Announcement: Addresses critical flaw in Firefox buffer overflow. Essential information enclosed.. openSUSE Update, bird Security Fix, buffer Overflow Patch. . LinuxSecurity.com Team
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for bird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2178-1 Rating: moderate References: #1150108 Cross-References: CVE-2019-16159 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bird fixes the following issues: - CVE-2019-16159: Fixed a stack-based buffer overflow via administrative shutdown communication messages. (bnc#1150108) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2178=1 Package List: - openSUSE Leap 15.1 (x86_64): bird-1.6.8-lp151.2.3.1 bird-common-1.6.8-lp151.2.3.1 bird-debuginfo-1.6.8-lp151.2.3.1 bird-debugsource-1.6.8-lp151.2.3.1 bird-doc-1.6.8-lp151.2.3.1 bird6-1.6.8-lp151.2.3.1 bird6-debuginfo-1.6.8-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-16159.html https://bugzilla.suse.com/1150108 -- . New patch released for openSUSE Sparrow, addressing notable buffer overflow vulnerability with crucial instructions provided.. openSUSE Update, bird Security Patch, stack buffer overflow, administrative shutdown fix. . LinuxSecurity.com Team
Daniel McCarney discovered that the BIRD internet routing daemon incorrectly validated RFC 8203 messages in it's BGP daemon, resulting in a stack buffer overflow. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4528-1
Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-8f0d2429d3 2018-12-07 02:13:26.114657 --------------------------------------------------------------------------------Name : bird Product : Fedora 28 Version : 1.6.4 Release : 2.fc28 URL : https://bird.network.cz/ Summary : BIRD Internet Routing Daemon Description : BIRD is dynamic routing daemon supporting IPv4 and IPv6 versions of routing protocols BGP, RIP and OSPF. This package contains IPv4 version. --------------------------------------------------------------------------------Update Information: Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root --------------------------------------------------------------------------------ChangeLog: * Mon Nov 12 2018 Stanislav Kozina - 1.6.4-2 - bird should run under bird user and group rather than root (#1397574) - bird should run in foreground (#1285672) * Mon Nov 12 2018 Stanislav Kozina - 1.6.4-1 - Update bird to 1.6.4 (#1642737) --------------------------------------------------------------------------------References: [ 1 ] Bug #1285672 - Bird should start in foreground in the systemd unit https://bugzilla.redhat.com/show_bug.cgi?id=1285672 [ 2 ] Bug #1642737 - bird-1.6.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1642737 [ 3 ] Bug #1588771 - CVE-2018-12066 bird: Stack overflow in BGP mask expressions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1588771 [ 4 ] Bug #1397574 - Bird should drop privileges https://bugzilla.redhat.com/show_bug.cgi?id=1397574 --------------------------------------------------------------------------------This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-8f0d2429d3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.