Thanks Lucy for bringing this issue up. I will ask our in house BGP folks to evaluate these three issues. In general, I would expect this is the issue for SONiC deployment as we use FRR BGP. Thanks Eddie ------------------------------------------------------------------ From:Lucy Hyde <lhyde@linuxfoundation.org> Sent At:2023 May 3 (Wed.) 19:21 To:sonic-wg-routing@lists.sonicfoundation.dev <sonic-wg-routing@lists.sonicfoundation.dev>; sonic-dev <sonic-dev@lists.sonicfoundation.dev>; Praveen Bhagwatula (pbhagwat) <pbhagwat@cisco.com>; Syed Hasan Raza Naqvi <syed.naqvi@broadcom.com>; Rita Hui <Rita.Hui@microsoft.com>; dev <dev@lists.frrouting.org> Cc:Yanzhao Zhang <yanzhaoz@microsoft.com>; Lihua Yuan <Lihua.Yuan@microsoft.com> Subject:Re: [sonic-dev] [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting Hello SONiC Routing Working Group, I’m not sure if this is the appropriate place to ask this question and will also bring it up to the TSC- but I saw the note about using FRR in SONiC below and this article was flagged to me for investigation this morning: https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html?... <https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html?... > It discusses three vulnerabilities in FRRouting, and specifically mentions Cumulus, DENT, and SONiC. Please let me know if this is already being worked (so I can let Arpit know) and if not, if I can provide any assistance with regard to security scanning and audit and how you would like to proceed. Best, Lucy Lucy Hyde Program Manager | LF Projects in AI & Networking The Linux Foundation From: sonic-wg-routing@lists.sonicfoundation.dev <sonic-wg-routing@lists.sonicfoundation.dev> on behalf of Eddie Ruan via lists.sonicfoundation.dev <eddie.ruan=alibaba-inc.com@lists.sonicfoundation.dev> Date: Wednesday, May 3, 2023 at 12:15 PM To: sonic-wg-routing <sonic-wg-routing@lists.sonicfoundation.dev>, sonic-dev <sonic-dev@lists.sonicfoundation.dev>, Praveen Bhagwatula (pbhagwat) <pbhagwat@cisco.com>, Syed Hasan Raza Naqvi <syed.naqvi@broadcom.com>, Rita Hui <Rita.Hui@microsoft.com>, dev <dev@lists.frrouting.org> Cc: Yanzhao Zhang <yanzhaoz@microsoft.com>, Lihua Yuan <Lihua.Yuan@microsoft.com> Subject: [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting Hi, Just a friendly reminder that we will have routing WG kick off meeting on 5/4 5:30-6:30pm PST (5/5 8:30-9:30 am China time). The zoom info could be found below. You could subscribe this WG via https://lists.sonicfoundation.dev/g/sonic-wg-routing <https://lists.sonicfoundation.dev/g/sonic-wg-routing > * Subscribe: sonic-wg-routing+subscribe@lists.sonicfoundation.dev <mailto:sonic-wg-routing+subscribe@lists.sonicfoundation.dev > I also include FRR email alias as well, since we use FRR as routing stack in SONiC and there are some enhancements needed from both FRR and SONiC to fully support routing features. Thanks Praveen, Hasan, Rita, Eddie Please download and import the following iCalendar (.ics) files to your calendar system. Weekly: https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=98... <https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=98... > Join Zoom Meeting https://zoom.us/j/95239140213 <https://zoom.us/j/95239140213 > Meeting ID: 952 3914 0213 One tap mobile +13126266799,,95239140213# US (Chicago) +16465588656,,95239140213# US (New York) Dial by your location +1 312 626 6799 US (Chicago) +1 646 558 8656 US (New York) +1 646 931 3860 US +1 301 715 8592 US (Washington DC) +1 305 224 1968 US +1 309 205 3325 US +1 360 209 5623 US +1 386 347 5053 US +1 507 473 4847 US +1 564 217 2000 US +1 669 444 9171 US +1 669 900 6833 US (San Jose) +1 689 278 1000 US +1 719 359 4580 US +1 253 205 0468 US +1 253 215 8782 US (Tacoma) +1 346 248 7799 US (Houston) 877 369 0926 US Toll-free 855 880 1246 US Toll-free +1 204 272 7920 Canada +1 438 809 7799 Canada +1 587 328 1099 Canada +1 647 374 4685 Canada +1 647 558 0588 Canada +1 778 907 2071 Canada +1 780 666 0144 Canada 855 703 8985 Canada Toll-free Meeting ID: 952 3914 0213 Find your local number: https://zoom.us/u/aewVD44sd4 <https://zoom.us/u/aewVD44sd4 > _._,_._,_ Links: You receive all messages sent to this group. View/Reply Online (#278) <https://lists.sonicfoundation.dev/g/sonic-dev/message/278 > | Reply To Sender <mailto:lhyde@linuxfoundation.org?subject=Private:%20Re:%20Re%3A%20%5Bsonic-dev%5D%20%5Bsonic-wg-routing%5D%20A%20reminder%20for%205%2F4%20SONiC%20Routing%20WG%20kick%20off%20meeting > | Reply To Group <mailto:sonic-dev@lists.sonicfoundation.dev?subject=Re:%20Re%3A%20%5Bsonic-dev%5D%20%5Bsonic-wg-routing%5D%20A%20reminder%20for%205%2F4%20SONiC%20Routing%20WG%20kick%20off%20meeting > | Mute This Topic <https://lists.sonicfoundation.dev/mt/98676540/7341548 > | New Topic <https://lists.sonicfoundation.dev/g/sonic-dev/post > Your Subscription <https://lists.sonicfoundation.dev/g/sonic-dev/editsub/7341548 > | Contact Group Owner <mailto:sonic-dev+owner@lists.sonicfoundation.dev > | Unsubscribe <https://lists.sonicfoundation.dev/g/sonic-dev/leave/11873633/7341548/9445430... > [eddie.ruan@alibaba-inc.com] _._,_._,_