[c-nsp] Cisco Security Advisory: Cisco IOS Misformed BGP PacketCauses Reload

[Dave McGaugh]

Randy,

I would suggest steering clear of 12.2(25)S2 on the 7200 if you are 
running IPv6 with ISIS-MT enabled. It has two serious bugs, one which 
causes random crashes when ISIS is doing some calculations while a link 
is flapping, the other is a rather fast ISIS memory leak.

CSCed36743 - Mem Leak
CSCef59924 - Crash

Both of these bugs exist in 12.2(25)S, S1, S2.

Regards,
Dave

On Jan 26, 2005, at 10:44 PM, Randy Bush wrote:

>>>>> +--------------------------------------+
>>>>>   Major    | Availability of Repaired  |
>>>>>  Release   |         Releases*         |
>>>>> -----------+---------------------------|
>>>> ...
>>>>> -----------+-------------+-------------|
>>>>>            | 12.0(26)S5  |             |
>>>>>            |-------------+-------------|
>>>>>            | 12.0(27)S4  |             |
>>>>> 12.0S      |-------------+-------------|
>>>>>            | 12.0(28)S1  |             |
>>>>>            |-------------+-------------|
>>>>>            |             | 12.0(29)S   |
>>>>> -----------+-------------+-------------|
>>> so, which of the new tomatoes fit in my old can?  and which flavor is
>>> recommended?
>>> rtr42#sh ver
>>> Cisco Internetwork Operating System Software
>>> IOS (tm) 7200 Software (C7200-K4P-M), Version 12.0(25.4)S, EARLY
>> 12.0(26)S5 would be my choice (having the same features as your 
>> current
>> interim image).
>
> friends are pushing me to c7200-k91p-mz.122-25.S2.bin for the ipv6
> support (do friends let friends use ipv6?:-).  but i am concerned
> about remote upgrade of config from 12.0 to 12.2( i am in bkk and
> the router is in seattle).  am i being unduly 'noid?
>
> randy
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/