Hi Leo,

sorry for not getting to you sooner.

Lately we have received a lot of bug reports from AI security tools and we need some time to assess/fix them.
Generally, possible security issues do belong to bird-support@network.cz email while other types of bug reports are more fitting for this bird-users mailing list.
We kindly ask everyone to try to accurately assess the severity of the issue beforehand, as it saves us a lot of time processing the reports.

That is to our reporting policy in general. 

Regarding your reports, we have received your emails containing bug reports and put them to our internal issue tracker. Thank you for reporting them!
Fixes to some of them have already been included in the released patch versions released yesterday, and your name has been mentioned in the appropriate commit messages.

You can see them on our GitLab here:

https://gitlab.nic.cz/labs/bird/-/commit/6749933fc1fe2d6f2b478b33bd488c8d96466ba2
https://gitlab.nic.cz/labs/bird/-/commit/3bfb3e32186cabfda60071dd91020a79ee861a66
https://gitlab.nic.cz/labs/bird/-/commit/328a19ebb033b587223e347706186264e41ddea8

We are still processing the rest of them and we ask you for your patience.
Will let you know once we fix them, or you can check it yourself when you clone our repo and search for your email in commit messages, for example like so `git log --grep='lzx0xf1@gmail.com'`.

If you have any other questions feel free to ask.  

Thank you again for helping us in making BIRD better!

Happy routing,
David

David Petera (he/him) | BIRD Tech Support | CZ.NIC, z.s.p.o.

Hello BIRD maintainers,
I am a security researcher working on open-source routing software security. Previously, I submitted several security issue reports to bird-support@network.cz, including vulnerability analysis, reproduction steps, and technical details related to the BIRD routing daemon. However, I have not received any acknowledgement or feedback so far. I would like to confirm whether these reports have reached the appropriate development/security team, or whether there is another preferred channel for reporting security issues.

Could you please help confirm the appropriate security reporting process and whether the previous reports have been received? Thank you very much for maintaining the BIRD routing project. 

Best regards

leo

Sender notified with Mailtrack  ·  Opt out

26/07/31 20:46:00