@jeff What exactly did you do when you "tried it with vpp"? Can you tell us a bit about what hardware you tested on and what your numbers were?

@mickvav Sorry, I don't have a build environment set up right now. I opened this ticket mostly as a service to the VyOs commmunity since nobody on the quagga side had gotten around to alerting you.

@dmbaturin I understand, and I didn't mean to be someone just grousing from the sidelines. My evaluation of that specific patch is the most I can offer at the moment.

@dmbaturin Oops, started my reply before your second comment was posted.

@dmbaturin I'm glad to hear that you'll be releasing a new version soon.

1. It's one freaking line

@syncer Did you read what I wrote??

Why aren't you all discussing this on the Quagga mailing list? More generally, what is the VyOS project policy about work that belongs in upstream?

Anyone working on this? The changes to BGP are important, but the OSPFv3 changes are critical.

Let me add that there is another CVE (CVE-2016-4049) which may not apply to VyOS (I don't use BGP MRT, so I have no idea what the state of play is there).