12 messages in net.nether.puck.cisco-nsp[c-nsp] Cisco Security Advisory: Cisc...
FromSent OnAttachments
Cisco Systems Product Security Incident Response TeamJan 26, 2005 12:25 pm 
Randy BushJan 26, 2005 10:12 pm 
Oliver Boehmer (oboehmer)Jan 27, 2005 12:55 am 
Randy BushJan 27, 2005 1:44 am 
Pekka SavolaJan 27, 2005 3:45 am 
Gert DoeringJan 27, 2005 4:15 am 
Dave McGaughJan 27, 2005 10:39 am 
Johannes ReschJan 27, 2005 10:46 am 
Ted MittelstaedtJan 28, 2005 2:36 am 
Ted MittelstaedtJan 28, 2005 2:39 am 
Oliver Boehmer (oboehmer)Jan 28, 2005 4:41 am 
Randy BushJan 30, 2005 7:54 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[c-nsp] Cisco Security Advisory: Cisco IOS Misformed BGP PacketCauses ReloadActions...
From:Dave McGaugh (dmcg@cac.washington.edu)
Date:Jan 27, 2005 10:39:22 am
List:net.nether.puck.cisco-nsp

Randy,

I would suggest steering clear of 12.2(25)S2 on the 7200 if you are running IPv6 with ISIS-MT enabled. It has two serious bugs, one which causes random crashes when ISIS is doing some calculations while a link is flapping, the other is a rather fast ISIS memory leak.

CSCed36743 - Mem Leak CSCef59924 - Crash

Both of these bugs exist in 12.2(25)S, S1, S2.

Regards, Dave

On Jan 26, 2005, at 10:44 PM, Randy Bush wrote:

+--------------------------------------+ Major | Availability of Repaired | Release | Releases* | -----------+---------------------------| ... -----------+-------------+-------------| | 12.0(26)S5 | | |-------------+-------------| | 12.0(27)S4 | | 12.0S |-------------+-------------| | 12.0(28)S1 | | |-------------+-------------| | | 12.0(29)S | -----------+-------------+-------------|

so, which of the new tomatoes fit in my old can? and which flavor is recommended? rtr42#sh ver Cisco Internetwork Operating System Software IOS (tm) 7200 Software (C7200-K4P-M), Version 12.0(25.4)S, EARLY

12.0(26)S5 would be my choice (having the same features as your current interim image).

friends are pushing me to c7200-k91p-mz.122-25.S2.bin for the ipv6 support (do friends let friends use ipv6?:-). but i am concerned about remote upgrade of config from 12.0 to 12.2( i am in bkk and the router is in seattle). am i being unduly 'noid?