Re: BIRD/BIRD2: stack buffer overflow in BGP AS_PATH mask matching, CVE pending

[Dan Yefihmov <dan () lightwave net ru>]

On June 2, 2026 11:41:33 PM GMT+03:00, Stuart Henderson <stu () spacehopper org> wrote:
> From the talk I linked to, for BIRD from the start of 2026 up to 19 May,
> that was *70*. The ones I've seen (not for BIRD) they're often extremely
> verbose, and they're often plain wrong (the talk suggests ~ 9% of the
> reports for BIRD were valid).
>
> At this point I think it is fairly reasonable for small development
> teams to not spend all that much time researching a lower-effort
> report. If it's valid there will likely be a handful of duplicate
> reports coming along soon afterwards anyway, and hopefully one of
> those may have done more triage before sending out.
If somebody writes he doesn't currently plan to do something, that means only that, nothing else. Everything else is a 
pure speculation, not an established fact.


Sincerely Yours, Dan.