[PATCH] bird: Update to version 3.3.3

[Adolf Belka <adolf.belka@ipfire.org>]

- Update from version 2.15.1 to 3.3.3
- No change in rootfile
- Although there are no CVE's mentioned some of the bug fixes look to be security related
- Changelog
3.3.3
  o BMP/Nest: No refeed after listener or protocol restart
  o BMP: Fix crash on sending routes
  o BMP: Fix route sending when no import table is configured
  o EVPN: Improve tunnel and bridge intarface handling
  o Netlink: Fix handling of interface attributes for slave interfaces
  o OSPF: Fix LSA length overflow
  o RAdv: Add hop limit validation
  o RPKI: Fix socket close detection during rx_hook
  o Proto: Fix VRF settings
  o MPLS: Fix crash on reconfiguring label ranges
  o Tools: Fix version script for Git 2.55+
  o Conf: Fix use-after-free in cf_include() error path
  o Lib: Fix bvsnprintf() on too long net_addr values
  o Lib: Fix endptr in bstrtoul16()
3.3.2
  o BGP: Fix stack buffer overflow in Flowspec NLRI decoder
  o BGP: Minor improvements in Flowspec parsing
  o BGP: Fix minor issues with send hold timer
  o Fix null byte handling in authentication keys
  o Pipe, L3VPN: Fix hostentry stripping
  o Filter: Fix zero arg handling
  o Logging: Fix use-after-free on failed rotation
  o CLI: Fix crashes in show route
  o Allocator: Pre-fill hot pages when entering RCU critical section
  o Fix obstacle cleanup
  o Update bird-users mailing list links
3.3.1
  o BGP: Fix crash when incoming connection for disabled protocol arrives
  o BGP: Fix parsing labelled NLRIs with no next hop
  o BGP: Fix cork behavior in collision with graceful restart
  o BGP: Fix crash on dumping pending export statistics
  o BGP: Fix several issues in Flowspec handling
  o BMP/Nest: No refeed after listener or protocol restart
  o MPLS: Fix crash on reconfiguring CS_DOWN channel
  o OSPF: Fix handling of LLS data length field
  o OSPF: Fix OOB read in authentication check
  o OSPF: Fix OOB read in Router-LSA validation
  o Proto: Fix regression in protocol enabling
  o Channel: Fix refeeds and reloads during graceful restart
  o Export: Mitigate duplicate withdrawals
  o Filters: Fix crash when setting gateway on recursive nexthops
  o Filters: Fix path matching when AS path is too long.
  o Table: Fix RCU double-anchor
  o Table: Propagate thread group config into aux
  o RCU: Catch leaks sooner
3.3.0
  o BGP: Export memory consumption optimization
  o BGP: Fix hostentry handling of MPLS and EVPN routes
  o BGP: Block connections on explicitly disabled instances
  o Proto/CLI: Lock show-commands
  o Proto: Loop persists through down state
  o Nest/CLI: Show only the longest prefix match in 'show route for'
  o Nest: Lockless attribute cache
  o Removed locking in random number generation
  o ASPA: Fix downstream validation
  o BMP: Fix route sending
  o BGP: Fix route refresh after restart
  o BGP: Fix dynamic peer connection
  o Filters: Fix string attributes
  o Filters: Fix ROA check autoreload reconfiguration
  o Logging: Fix error handling
  o Kernel: Fix graceful recovery
  o Pipe: Fix rare collision bug
  o Config: Allow keyword redefinition
  o Merged 2.19
3.2.0
  o BGP: Listening socket rework
  o IGP metric: Split out local_metric again
  o Table: Optimal and Any Export refactoring
  o Various race condition fixes
  o All fixes included in 3.1.0 -- 3.1.5
  o Merged 2.18
3.1.0
  o CLI v2 compatibility layer for show route
  o Thread configuration rework
  o Merged 2.17
3.0.2
  o Multiple route propagation crash fixes
  o BGP export table route source leak
  o Kernel export of source.specific routes fix
  o Filter gw setting fix
  o Merged 2.16.2
3.0.1
  o BGP: Fixed crash in dynamic spawn
  o BGP: Fixed crash in graceful recovery
  o BGP: Fixed crash with deterministic med
  o BGP: Renamed the otc attribute to bgp_otc
  o BFD: Fixed crash in session reconfiguration
  o Kernel: Fixed crash with merged paths
  o Kernel: Simplified initial scan
  o Tables: Fixed old best route propagation
  o Tables: Fixed debug configuration propagation
  o Tables: Fixed initial feeds
  o CLI: Fixed buffer allocation heap bloating
  o Reduced route attribute normalization heap bloating
  o Merged 2.16.1
3.0.0
  o Multithreaded execution
  o Decoupled exports from imports
  o Unified route attribute names
  o Slightly different log format
  o Separate reload command for filters and protocols
  o BGP: Export tables show the state as on wire
  o Lots of internal changes
  o Merged changes from 2.16
  o BMP and MRT converted to the new API and working
  o Internal protocol state journal
  o Optimized table journal cleanup
  o Fixed "show route export"
  o Fixed minor bugs
3.0.alpha3
  o Merged 2.15.1
  o Fixed major issues with channel reloads
  o Fixed data inconsistencies in many corner cases
  o Fixed internal scheduler corner cases
  o MRT and BMP still switched off
  o Expected one more alpha before stable
3.0.alpha2
  o Fixed memory leaks and use-after free bugs
  o Simple thread work balancing
  o MRT switched off
  o Slow kernel route synchronization to be fixed later
3.0.alpha1
  o Worker threads for BGP, Pipe, RPKI and BFD
  o Configurable number of threads
  o Asynchronous route export
  o Flat attribute structure
  o Inline import tables
  o Export tables merged with BGP prefix / attribute buckets
  o Fixed ROA check locking inversion in route table dumps
  o MRT switched off
3.0.alpha0
  o Removal of fixed protocol-specific route attributes
  o Asynchronous route export
  o Explicit table import / export hooks
  o Partially lockless route attribute cache
  o Thread-safe resource management
  o Thread-safe interface notifications
  o Thread-safe protocol API
  o Adoption of BFD IO loop for general use
  o Parallel Pipe protocol
  o Parallel RPKI protocol
  o Parallel BGP protocol
  o Lots of refactoring
  o Bugfixes and improvements as they came along
2.19.0
  o BGP/MPLS Ethernet VPNs using VXLAN tunnels
  o BGP: PMSI tunnel attribute
  o Linux Netlink implementation for bridge interfaces
  o BGP: Automatic peering based on discovered neighbors
  o RAdv: Router discovery based on incoming Router Advertisments
  o Nest: Add message when attempting to reload protocol that is not UP
  o BMP: Fix off-by-one buffer overflow
  o OSPF: Fix infinite loop in OSPF Graceful Restart
  o ASPA: Fix downstream validation
  o Filters: Fix string attributes
  o Logging: Fix error handling
  o Minor filter improvements
  o Various documentation fixes
2.18
  o BGP: Support for dynamic onlink and link-local connections
  o BGP: Listening socket refactoring
  o BGP: Fix restart behavior on outgoing next hop setting
  o BGP: Configuring global/link-local IPv6 nexthop
  o BGP: Disallow AS Sets by default
  o L3VPN: Support for import/export target none and import target all
  o RAdv: P-flag to prefer prefix delegation in DHCPv6
  o Filter: Merging of case intervals
  o Filter: Append operator
  o ASPA: Paths containing AS_SET are invalid
  o Doc: Update website to bird.nic.cz
  o CI: Upstream packaging cleanup and reproducible builds
  o Various minor fixes in code, comments, documentation and tooling
2.17.1
  o BSD: Fix build on NetBSD
  o BGP: Fix crash when incoming connection for disabled protocol arrives
  o Documentation fixes
2.17
  o Babel: next hop control for IPv4
  o BGP: link-local next hop format configuration
  o TCP-AO implementation for Linux
2.16.2
  o BFD: password reconfiguration crash fix
  o L3VPN attribute fix
  o Table removal rare crash fix
  o Logging minor fix
2.16.1
  o ASPA: fixed parser bug in static protocol
  o ASPA: fixed static protocol reconfiguration
  o Babel: fixed seqno comparison
  o BSD: fixed onlink flag assumption with Netlink
  o Fixed memory alignment issues
  o Fixed possible rte src collisions in L3VPN
2.16
  o BFD: Set password per session
  o BFD: Accept zero checksum for IPv6-UDP
  o BMP: Refactoring and optimizations
  o OSPF: Allow loopback nexthop in OSPFv3-IPv4
  o RPKI: TCP-MD5 authentication option
  o Filters: Add enum types to filter grammar
  o CLI: Configurable additional control sockets
  o CLI: Timeformat command
  o CLI: Dump commands need a target file
  o ASPA support in filters, Static and RPKI
  o Formalized contributions and credits policy
  o Many bugfixes and improvements

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/bird | 18 ++++++++----------
 1 file changed, 8 insertions(+), 10 deletions(-)

diff --git a/lfs/bird b/lfs/bird
index be78593c3..d5d582ab9 100644
--- a/lfs/bird
+++ b/lfs/bird
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = The BIRD Internet Routing Daemon
 
-VER        = 2.15.1
+VER        = 3.3.3
 
 THISAPP    = bird-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = bird
-PAK_VER    = 14
+PAK_VER    = 15
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c3fe95ae2b8a3dca036278c8014f3ce2d1fd224c65c10abcc77b2cc1dbdfaa1b5766e8643b873a12ac33f00cd5e866aa7ce853ead78150ec4314b53457ad554a
+$(DL_FILE)_BLAKE2 = 0e3218b343c55787eec300155c6c96205f6c433e4fb3d8e38a96919b1e2cbb92d80dec43f5548d22d33ad90f05dcd64fe093d09c0aa23c7fd882cbe48e17a0d0
 
 install : $(TARGET)
 
@@ -81,12 +81,10 @@ $(subst %,%_BLAKE2,$(objects)) :
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
-	$(UPDATE_AUTOMAKE)
-	cd $(DIR_APP) && \
-		./configure \
-			--prefix=/usr \
-			--sysconfdir=/etc \
-			--localstatedir=/var
+	cd $(DIR_APP) && ./configure \
+				--prefix=/usr \
+				--sysconfdir=/etc \
+				--localstatedir=/var
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 
-- 
2.55.0