BSDSec

deadsimple BSD Security Advisories and Announcements

OpenBGPD 7.2 released

We have released OpenBGPD 7.2, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * Support for RFC 9072 - Extended Optional Parameters Lenght for
      BGP OPEN Message

    * Support for RFC 8050 - MRT Format with BGP Additional Path Extensions

    * Implement receive side of RFC 7911 - Advertisement of Multiple Paths
      in BGP. OpenBGPD is currently not able to send multiple paths out.

    * Improve checks of VRPs loaded via RTR or from the roa-set table.

    * Allow to optionally specify an expiry time for roa-set entries to
      mitigate BGP route decision making based on outdated RPKI data.
      OpenBGPD's companion rpki-client(8) produces roa-sets with the
      new 'expires' property

OpenBGPD-portable is known to compile and run on FreeBSD, and
the Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.

We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.