BSDSec

deadsimple BSD Security Advisories and Announcements

OpenBGPD 7.4 released

We have released OpenBGPD 7.4, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * Implement max-communities filter to limit the number of allowed
      communities, ext-communities and large-communities.

    * Fix TCP-MD5 support on Linux systems. The TCP-MD5 keys were not
      correctly loaded on the listening sockets, which allowed unprotected
      connections in. 

    * Fix insertion of additional non-transitive extended communities when
      sending out prefixes.

    * Relax IP address limitation by allowing prefixes in 240/4.

OpenBGPD-portable is known to compile and run on FreeBSD, and
the Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.

We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.