From eab7c589cf4611ff9e7e57345b6a6612bd46708a Mon Sep 17 00:00:00 2001 From: Josef Schlehofer Date: Mon, 26 Oct 2026 13:02:52 +0100 Subject: [PATCH 1/2] bird2: update to 2.19.3 This fixes a stack buffer overflow in the BGP Flowspec NLRI decoder, accepting authentication keys that differ after a null byte and an LSA length overflow in OSPF. The 2.18 series is supported upstream only until the end of November 2026, so update to the same version as openwrt-25.12 and master (openwrt/packages commit 295e53fff8). Signed-off-by: Josef Schlehofer --- bird2/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bird2/Makefile b/bird2/Makefile index 7d5051e8d..73bc5befd 100644 --- a/bird2/Makefile +++ b/bird2/Makefile @@ -7,12 +7,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=bird2 -PKG_VERSION:=2.18.2 +PKG_VERSION:=2.19.3 PKG_RELEASE:=1 PKG_SOURCE:=bird-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=https://bird.nic.cz/download/ -PKG_HASH:=1c57639bdab25b04e96fb771faf58641cbcf1e8a4d5342e4cbfb111ed0b71fe8 +PKG_HASH:=853ea9e9adc36ea5277c3883c5ceddf06460fc496743dbdbff191975e1f55ebd PKG_MAINTAINER:=Toke Høiland-Jørgensen PKG_LICENSE:=GPL-2.0-or-later From 7996dd7d4451197d2e07d19b4cac09c7cf26b1b0 Mon Sep 17 00:00:00 2001 From: Josef Schlehofer Date: Mon, 26 Oct 2026 13:02:53 +0100 Subject: [PATCH 2/2] bird3: update to 3.3.3 This fixes a stack buffer overflow in the BGP Flowspec NLRI decoder, accepting authentication keys that differ after a null byte and an LSA length overflow in OSPF. The 3.2 series is supported upstream only until the end of November 2026, so update to the same version as openwrt-25.12 and master (openwrt/packages commit 5258ec2c04). Signed-off-by: Josef Schlehofer --- bird3/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bird3/Makefile b/bird3/Makefile index 37e5ae031..039a60d9f 100644 --- a/bird3/Makefile +++ b/bird3/Makefile @@ -3,12 +3,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=bird3 -PKG_VERSION:=3.2.2 +PKG_VERSION:=3.3.3 PKG_RELEASE:=1 PKG_SOURCE:=bird-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=https://bird.nic.cz/download/ -PKG_HASH:=5b275f0f91c063bd0369a2996982f8f578736eb9b4b5c0fb62a275ec663f74df +PKG_HASH:=7e8b28a17dd619eb73eba959ef6a944dd9c11cf5c1700a2ecbb8eb13bd4a8a57 PKG_MAINTAINER:=Toke Høiland-Jørgensen , Nick Hainke PKG_LICENSE:=GPL-2.0-or-later