June 2026 - Bird-users - Mailing Lists

Re: CentOS 7 repo not work
by Maria Matejka 13 Jun '26

13 Jun '26

Hi Zhang Xun, the reason was that my scripting missed some renaming, and therefore the exception for createrepo, which must run with `--compatibility` for centos 7, was not hit. After re-running `createrepo` and reuploading, it looks fixed on my side. Please note that CentOS 7 may get discontinued without notice when we find out that our tooling breaks beyond repair. Iŧ's hard to keep the build machinery running for a discontinued distro. Thank you for your report! Maria On Sat, Jun 13, 2026 at 10:33:43PM +0800, zx--- via Bird-users wrote: > Hi there, > > Some of my servers are still using CentOS 7 and I'm following https://bird.nic.cz/get-bird/ to install bird, but it looks like CentOS 7 repo is broken? > > [root@localhost ~]# yum-config-manager --add-repo https://pkg.labs.nic.cz/rpm/bird/centos/7/x86_64/bird.repo > Loaded plugins: elrepo, fastestmirror > adding repo from: https://pkg.labs.nic.cz/rpm/bird/centos/7/x86_64/bird.repo > grabbing file https://pkg.labs.nic.cz/rpm/bird/centos/7/x86_64/bird.repo to /etc/yum.repos.d/bird.repo > repo saved to /etc/yum.repos.d/bird.repo > [root@localhost ~]# yum update > Loaded plugins: elrepo, fastestmirror > Determining fastest mirrors > base | 3.6 kB 00:00:00 > bird | 1.5 kB 00:00:00 > epel | 4.3 kB 00:00:00 > extras | 2.9 kB 00:00:00 > updates | 2.9 kB 00:00:00 > bird/primary | 11 kB 00:00:02 > > > One of the configured repositories failed (Unknown), > and yum doesn't have enough cached data to continue. At this point the only > safe thing yum can do is fail. There are a few ways to work "fix" this: > > 1. Contact the upstream for the repository and get them to fix the problem. > > 2. Reconfigure the baseurl/etc. for the repository, to point to a working > upstream. This is most often useful if you are using a newer > distribution release than is supported by the repository (and the > packages for the previous distribution release still work). > > 3. Run the command with the repository temporarily disabled > yum --disablerepo=<repoid> ... > > 4. Disable the repository permanently, so yum won't use it by default. Yum > will then just ignore the repository until you permanently enable it > again or use --enablerepo for temporary usage: > > yum-config-manager --disable <repoid> > or > subscription-manager repos --disable=<repoid> > > 5. Configure the failing repository to be skipped, if it is unavailable. > Note that yum will try to contact the repo. when it runs most commands, > so will have to try and fail each time (and thus. yum will be be much > slower). If it is a very temporary problem though, this is often a nice > compromise: > > yum-config-manager --save --setopt=<repoid>.skip_if_unavailable=true > > Parsing primary.xml error: Start tag expected, '<' not found > > [root@localhost ~]# cat /etc/os-release > NAME="CentOS Linux" > VERSION="7 (Core)" > ID="centos" > ID_LIKE="rhel fedora" > VERSION_ID="7" > PRETTY_NAME="CentOS Linux 7 (Core)" > ANSI_COLOR="0;31" > CPE_NAME="cpe:/o:centos:centos:7" > HOME_URL="https://www.centos.org/" > BUG_REPORT_URL="https://bugs.centos.org/" > > CENTOS_MANTISBT_PROJECT="CentOS-7" > CENTOS_MANTISBT_PROJECT_VERSION="7" > REDHAT_SUPPORT_PRODUCT="centos" > REDHAT_SUPPORT_PRODUCT_VERSION="7" > > > > > Zhang Xun > -- Maria Matejka (she/her) | BIRD Team Leader | CZ.NIC, z.s.p.o.

1 0

[PATCH] BGP: Fix bucket assert when encoding BMP route monitoring messages
by Yifei Sun 11 Jun '26

11 Jun '26

Good afternoon, the 2 issues I reported last week (e038bf6 and 371531d) was resolved on my side in 3.3.1. Thank you! Today in CI, I'm seeing some assertion throws that affects both 3.3.0 and 3.3.1 with BMP (traces also in the linked CI log): - https://github.com/stepbrobd/rfm/actions/runs/27352866052/job/80819677363#s… - https://github.com/stepbrobd/rfm/actions/runs/27347885470/job/80814124422#s… Relevant config: - https://github.com/stepbrobd/rfm/blob/187c61620b3af6ec77e1cc730c6b6b37d174d… I applied the same patch on 3.3.1 locally to unblock CI, and the current patch is based on thread-next bgp_create_update_bmp() encodes routes for BMP using a temporary bucket allocated on stack. Such buckets are not allocated from the bucket slab and have no ID assigned, so the assert at the beginning of bgp_delete_from_bucket() fails as soon as the NLRI encoder pops the prefix, aborting the daemon on the first route monitoring message that carries a real prefix. On BIRD 3.3.1: > Assertion 'b->my_id' failed at proto/bgp/attrs.c:2020 Temporary BMP buckets always hold exactly one prefix and take the single-prefix path, which does not use the bucket ID at all, so allow them through the assert. Introduced in 9fa3e89476ed53b6a9d41931a8cdf9a8c675be27 "BGP: Compacting export prefix buckets" --- proto/bgp/attrs.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proto/bgp/attrs.c b/proto/bgp/attrs.c index 6c38d4955..ee893d2c1 100644 --- a/proto/bgp/attrs.c +++ b/proto/bgp/attrs.c @@ -2063,7 +2063,7 @@ bgp_delete_from_bucket(struct bgp_ptx_private *c, struct bgp_bucket *b, u32 id) bgp_bucket_consistency(b); #endif - ASSERT_DIE(b->my_id); + ASSERT_DIE(b->my_id || b->bmp); u32 row_num = BUCKET_PREFIX_ROW(id); u32 pos = BUCKET_PREFIX_POS(id); ASSERT_DIE(b->last_pref_id); -- 2.54.0

1 0

Releases on bird.network.cz no longer updated
by Leon Grasmeijer 11 Jun '26

11 Jun '26

Hi there, Are https://bird.network.cz/?download and ftp://bird.network.cz/pub/bird/ no longer being updated? I see there are some versions missing that have been announced and are present on https://bird.nic.cz/get-bird/. Kind regards, Leon

2 1

Crash with `Assertion 'BIT32_TEST(cur->used_bits, idx)' failed at lib/islab.c:678` on 3.3.1
by Matt Corallo 10 Jun '26

10 Jun '26

Sadly I don't have a useful coredump since I was running against a package that I don't have symbols for. Matt

2 1

BIRD 3.3.0 crashes on "birdc show route for 209.24.0.0/24"
by Robert Scheck 09 Jun '26

09 Jun '26

Hello all, unfortunately, BIRD 3.3.0 as shipped by EPEL 9 crashes at the following: $ birdc show route for 209.24.0.0/24 BIRD 3.3.0 ready. Connection closed by server $ Jun 9 18:34:47 kernel: bird[17874]: segfault at 0 ip 0000562a987ed574 sp 00007ffed8687a30 error 4 in bird[562a987a1000+11d000] likely on CPU 18 (core 2, socket 0) Jun 9 18:34:52 systemd-coredump[17976]: Process 17874 (bird) of user 990 dumped core.#012#012Stack trace of thread 17874:#012#0 0x0000562a987ed574 rt_show_net (/usr/sbin/bird + 0x61574)#012#012Stack trace of thread 17876:#012#0 0x00007f18d1f032cf n/a (n/a + 0x0) #012ELF object binary architecture: AMD x86-64 Jun 9 18:34:52 systemd[1]: bird.service: Main process exited, code=dumped, status=11/SEGV The correct answer of above command should be "Network not found", which it is on at least BIRD 2.16. Btw, "birdc show route 209.24.0.0/24 filtered" crashes the same way on BIRD 3.3.0. The correct answer would also be "Network not found". But as "birdc show route for 1.1.1.1" and "birdc show route for 1.1.1.0/24" both work fine, this only seems to affect non-existing routes? Do you need anything else for debugging? Regards, Robert

3 2

BIRD 3.3.1, 3.2.2, 3.1.7, 2.19.1, 2.18.2, 2.17.5 released
by Maria Matejka 09 Jun '26

09 Jun '26

Dear BIRD users, we're, as promised, releasing patch versions for all the supported branches. Downloads are possible at <https://bird.nic.cz/get-bird/> and in our upstream repositories. There are some security-relevant fixes this time with a varying degree of relevance. We have fixed a lot of BGP in BIRD 3, most notably several nasty bugs in graceful restart behavior, labelled NLRI parsing and other MPLS stuff. (There are still more MPLS bugs pending in BIRD 3.) We have fixed several flowspec parser flaws in all versions, which were there for years. We have fixed the no-refeed bug of BMP in BIRD 3, and also a cornercase off-by-one in all versions. We have fixed a bunch of corner case OSPF bugs. We have fixed a bunch of race conditions in internal reading the routing tables. We have also fixed the infamous remote code execution bug happening when the path mask feature is used on a gargantuan AS Path (in all versions). There are some outstanding bugs (in all versions) reported, and we've prioritized expediting this release which is already quite beefy, over doing it all at once. If your bug report has been reported as fixed, we would love if you confirmed that from your side. If not, it will most probably get fixed in the next patch release. Officially supported versions are now: - 3.3.x and 2.19.x until 6 months after 3.4.0 and 2.20.0 get released - 3.2.x and 2.18.x until end of November 2026 - LTS 3.1.x and 2.17.x tracking Debian Trixie Also, on commercial note, we offer BIRD Support, so that you can get help with configuration, priority access to critical bug information and fixes, and better influence the overall development directions. It's the users paying for these services, who keep the development running. More on that at our website: <https://bird.nic.cz/commercial-services/> Happy routing! Maria and the BIRD Team -- Maria Matejka (she/her) | BIRD Team Leader | CZ.NIC, z.s.p.o.

1 0

bird: Assertion 'birdloop_inside(sl->loop)' failed at lib/event.c:161
by Lexi Winter 09 Jun '26

09 Jun '26

hello, running BIRD 3.2.1 on OpenBSD/arm64 7.9, i changed the router-id in bird.conf, then ran 'birdc reload', and bird crashed: Jun 9 07:02:56 ragweed bird: Reconfiguring Jun 9 07:02:56 ragweed bird: Restarting protocol core4 Jun 9 07:02:56 ragweed bird: Restarting protocol core6 Jun 9 07:02:56 ragweed bird: Assertion 'birdloop_inside(sl->loop)' failed at lib/event.c:161 after restarting bird, it appears to be working fine. unfortunately, the generated core file does not seem to be very useful: (lldb) thread list Process 0 stopped * thread #1: tid = 0, 0x00000011e2b302d4 libc.so.103.0`_thread_sys_setsockopt at -:3, stop reason = signal SIGABRT (lldb) bt * thread #1, stop reason = signal SIGABRT * frame #0: 0x00000011e2b302d4 libc.so.103.0`_thread_sys_setsockopt at -:3 frame #1: 0x0000000d19648050 bird`sk_join_group at sysio.h:101:7 (lldb) i can provide the bird executable and core file privately if that's any use.

2 1

BIRD 3.3.0 Issue with bgp listen in VRF
by Arnaud Houdelette-Langlois 05 Jun '26

05 Jun '26

Hello. I’m currently trying to setup an EVPN SDN with proxmox (FRR) and bird for route reflectors and gateways. My RR BGP conf is like : template bgp vtep { vrf "vrf-underlay"; local as 65000; source address router_id; rr client; #rr cluster id 172.16.2.20; evpn { table evpnrr; igp table underlay; import all; export all; }; } protocol bgp uproxrtr1 from vtep { neighbor 172.16.2.21 internal; } This is working as long as bird is establishing the connexion. But the listening socket is opened in the default VRF. The issue disapear with bird 2.19.0, so I’ll stick with it for now. -- Arnaud HOUDELETTE-LANGLOIS Administrateur systèmes et réseaux informatiques Responsable de la sécurité des systèmes d'information Normandie-Université +33 2 31 56 69 54

2 1

Races in birdc causing daemon to crash on low spec routers
by Yifei Sun 03 Jun '26

03 Jun '26

Hello all, I'm hitting crash in BIRD 3.3.0 on several routers. The machines are running - NixOS x86_64-linux 7.0.10 - 2-5 BGP IPv4/IPv6 peers per affected host - prometheus-bird-exporter 1.4.5, scraping every 30s prometheus-bird-exporter runs `show protocols all` over /run/bird/bird.ctl every ~30s, and on hosts with active BGP churn that crashes bird inside bgp_show_proto_info(). systemd restarts it, the next scrape kills it again, and NRestarts climbs ~120/hr... toompea and timah took 14 and 13 cores in their last ~20 minutes of uptime, highline took 4 over a slower span. The other seven routers (butte, cradle, baldy, kongo, lantau, roraima, rysy) run the same build and exporter with no cores (most likely because these machines are only getting default routes). The crash needs concurrent BGP state changes. For example: ```console $ colmena exec --verbose --on @router -- 'sudo coredumpctl list || true' timah | highline | kongo | toompea | butte | cradle | baldy | rysy | lantau | roraima | rysy | No coredumps found. rysy | Succeeded toompea | TIME PID UID GID SIG COREFILE EXE SIZE toompea | Thu 2026-05-28 15:41:25 UTC 1185401 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 98.9M toompea | Thu 2026-05-28 15:41:53 UTC 1265107 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 100.3M toompea | Thu 2026-05-28 15:42:22 UTC 1265317 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 100.9M toompea | Thu 2026-05-28 15:42:54 UTC 1265529 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 106.1M toompea | Thu 2026-05-28 15:43:23 UTC 1265740 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 101.8M toompea | Thu 2026-05-28 15:43:54 UTC 1265952 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 105.9M toompea | Thu 2026-05-28 15:44:22 UTC 1266165 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 90.2M toompea | Thu 2026-05-28 15:44:53 UTC 1266380 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 100.6M toompea | Thu 2026-05-28 19:45:24 UTC 1266590 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 102.9M toompea | Thu 2026-05-28 19:45:53 UTC 1355754 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 88.6M toompea | Thu 2026-05-28 19:46:22 UTC 1355959 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 87.4M toompea | Thu 2026-05-28 19:46:53 UTC 1356167 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 100.8M toompea | Thu 2026-05-28 19:47:22 UTC 1356371 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 88.8M toompea | Thu 2026-05-28 19:47:54 UTC 1356389 993 991 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 104.8M toompea | Succeeded butte | No coredumps found. butte | Succeeded timah | TIME PID UID GID SIG COREFILE EXE SIZE timah | Thu 2026-05-28 15:36:51 UTC 1268745 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 96.9M timah | Thu 2026-05-28 15:37:17 UTC 1268960 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 98.6M timah | Thu 2026-05-28 15:37:52 UTC 1268974 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 95.9M timah | Thu 2026-05-28 15:38:18 UTC 1269382 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 89.2M timah | Thu 2026-05-28 15:38:53 UTC 1269397 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 95.4M timah | Thu 2026-05-28 19:39:27 UTC 1269828 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 131.6M timah | Thu 2026-05-28 19:39:48 UTC 1359330 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 76.2M timah | Thu 2026-05-28 19:40:20 UTC 1359346 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 99.8M timah | Thu 2026-05-28 19:40:49 UTC 1359574 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 94.1M timah | Thu 2026-05-28 19:41:20 UTC 1359832 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 98.9M timah | Thu 2026-05-28 19:41:51 UTC 1360097 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 93.9M timah | Thu 2026-05-28 19:42:22 UTC 1360320 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 88.9M timah | Thu 2026-05-28 19:42:48 UTC 1360526 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 78.8M timah | Succeeded highline | TIME PID UID GID SIG COREFILE EXE SIZE highline | Thu 2026-05-28 11:34:31 UTC 1203740 999 999 SIGSEGV present /nix/store/afhrc47kar31rwmvbj0qrymm6xcpglvk-bird-3.3.0/bin/bird 99.4M highline | Thu 2026-05-28 11:37:02 UTC 1204447 999 999 SIGSEGV present /nix/store/afhrc47kar31rwmvbj0qrymm6xcpglvk-bird-3.3.0/bin/bird 81.9M highline | Thu 2026-05-28 11:40:00 UTC 1205349 999 999 SIGSEGV present /nix/store/afhrc47kar31rwmvbj0qrymm6xcpglvk-bird-3.3.0/bin/bird 108.9M highline | Thu 2026-05-28 12:15:56 UTC 1220240 999 999 SIGSEGV present /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird 80.3M highline | Succeeded baldy | No coredumps found. baldy | Succeeded kongo | No coredumps found. kongo | Succeeded roraima | No coredumps found. roraima | Succeeded lantau | No coredumps found. lantau | Succeeded cradle | No coredumps found. cradle | Succeeded | All done! ``` ```console $ sudo coredumpctl info PID: 1356389 (bird) UID: 993 (bird) GID: 991 (bird) Signal: 11 (SEGV) Timestamp: Thu 2026-05-28 19:47:42 UTC (1h 37min ago) Command Line: /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird -c /etc/bird/bird.conf Executable: /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird Control Group: /system.slice/bird.service Unit: bird.service Slice: system.slice Boot ID: fd4c001e44dc44e1a05cbc5d60440ecb Machine ID: 77293224076f4ff7845c2358cb35a4c0 Hostname: toompea Storage: /var/lib/systemd/coredump/core.bird.993.fd4c001e44dc44e1a05cbc5d60440ecb.1356389.1779997662000000.zst (present) Size on Disk: 104.8M Message: Process 1356389 (bird) of user 993 dumped core. Module /nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird without build-id. Module libz.so.1 without build-id. Module libssh.so.4 without build-id. Stack trace of thread 1356389: #0 0x000059d538758d08 bgp_show_proto_info.lto_priv.0 (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0xdcd08) #1 0x000059d538706fb2 proto_cmd_show (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x8afb2) #2 0x000059d5387077c1 proto_apply_cmd.isra.0 (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x8b7c1) #3 0x000059d5386a2de8 cf_parse.isra.0 (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x26de8) #4 0x000059d5386ac462 cli_parse (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x30462) #5 0x000059d5386f96e5 cli_command (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x7d6e5) #6 0x000059d5386f9980 cli_event.lto_priv.0 (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x7d980) #7 0x000059d5386dff35 ev_run_list_limited (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x63f35) #8 0x000059d538693c8c main (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x17c8c) #9 0x00007ae37602b285 __libc_start_call_main (libc.so.6 + 0x2b285) #10 0x00007ae37602b338 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x2b338) #11 0x000059d538694885 _start (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x18885) Stack trace of thread 1356391: #0 0x00007ae3760a6922 __syscall_cancel_arch (libc.so.6 + 0xa6922) #1 0x00007ae37609a00c __internal_syscall_cancel (libc.so.6 + 0x9a00c) #2 0x00007ae37609a084 __syscall_cancel (libc.so.6 + 0x9a084) #3 0x00007ae37611778e __poll (libc.so.6 + 0x11778e) #4 0x000059d5387b3bfe bird_thread_main.lto_priv.0 (/nix/store/230z9nyndgbn265mqlbyvf20z5wdciwy-bird-3.3.0/bin/bird + 0x137bfe) #5 0x00007ae37609dd53 start_thread (libc.so.6 + 0x9dd53) #6 0x00007ae37612563c __clone3 (libc.so.6 + 0x12563c) ELF object binary architecture: AMD x86-64 ``` I temporarily worked around this by removing the prefix count showed when invoking `birdc show proto all`. But I’m not sure if this type of patches are acceptable for upstreaming (please see reasoning in the commit message in the patch): https://raw.githubusercontent.com/stepbrobd/inc/refs/heads/master/pkgs/bird… Best, Yifei

1 3

Fw: [oss-security] BIRD/BIRD2: stack buffer overflow in BGP AS_PATH mask matching, CVE pending
by Bruce Duncan 03 Jun '26

03 Jun '26

Hi, Long time lurker, first time poster. FYI, since I didn't see anything about this, I thought operators might want to be aware that a "vulnerability" has been disclosed on the oss-security list today, and this might cause managers/auditors to ask you probing questions. Hope that's helpful to someone. Bruce The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336. Is e buidheann carthannais a th’ ann an Oilthigh Dhùn Èideann, clàraichte an Alba, àireamh clàraidh SC005336.

2 1