Skip to content

ucentral: lldpd: update to 1.0.20 - #1333

Open
crychic-cybertan wants to merge 1 commit into
mainfrom
staging-WIFI-15765-ucentral-lldpd-update-to-1-0-20
Open

crychic-cybertan wants to merge 1 commit into
mainfrom
staging-WIFI-15765-ucentral-lldpd-update-to-1-0-20

Conversation

@crychic-cybertan

Copy link
Copy Markdown
Contributor

ucentral: lldpd: update to 1.0.20

Keep the custom UCI/SYSV init scripts introduced by 45f7950 ("ucentral: add custom lldpd package") but move the daemon itself from 1.0.5 (2019) to 1.0.20, the version shipped by OpenWrt 25.12 core.
This closes the following upstream-fixed issues:

  • CVE-2020-27827: memory leak on LLDPDUs with duplicate TLVs
    (lldpd 1.0.8/1.0.9)
  • CVE-2021-43612: heap overflow when reading short SONMP frames
    (lldpd 1.0.13)
  • CVE-2023-41910: out-of-bounds read in CDP address TLV parsing
    (lldpd 1.0.17)

Configure arguments and Config.in are identical to the core 1.0.20 package except for --enable-json0, which is kept so lldpcli JSON output stays in the format parsed by ucentral state/lldp.uc.
The tarball hash matches openwrt/package/network/services/lldpd.

Tested on SonicFi RAP7110C-341X: lldpd 1.0.20 runs and discovers the upstream switch on eth0;
lldpcli JSON output is read by ucentral.

Fixes:WIFI-15765

@crychic-cybertan crychic-cybertan added this to the 5.2.0 milestone Oct 26, 2026
@github-actions

github-actions Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

✅ PR & Commit Guidelines — all checks passed

Commits, PR description, C style, and milestone all look good. Thanks!

Commit hygiene

No issues found.

C style

No issues found.

PR description (ticket link)

No issues found.

Milestone

No issues found.

See OPENWIFI_PR_GUIDELINES.md and OPENWIFI_CODING_GUIDELINES.md. Items marked ⚠️ are advisory and do not fail the check.

@tanyasingh-ec

Copy link
Copy Markdown
Contributor

LGTM

  1. please share sanity check results in the Jira ticket
  2. please fix the commit hygiene issue - the check is in place so the PR sender should be fixing this by themselves without being checked again by the reviewer

Keep the custom UCI/SYSV init scripts introduced by 45f7950
("ucentral: add custom lldpd package") but move the daemon itself
from 1.0.5 (2019) to 1.0.20, the version shipped by OpenWrt 25.12
core. This closes the following upstream-fixed issues:

 - CVE-2020-27827: memory leak on LLDPDUs with duplicate TLVs
   (lldpd 1.0.8/1.0.9)
 - CVE-2021-43612: heap overflow when reading short SONMP frames
   (lldpd 1.0.13)
 - CVE-2023-41910: out-of-bounds read in CDP address TLV parsing
   (lldpd 1.0.17)

Configure arguments and Config.in are identical to the core 1.0.20
package except for --enable-json0, which is kept so lldpcli JSON
output stays in the format parsed by ucentral state/lldp.uc.
The tarball hash matches openwrt/package/network/services/lldpd.

Tested on SonicFi RAP7110C-341X: lldpd 1.0.20 runs and discovers the
upstream switch on eth0; lldpcli JSON output is read by ucentral.

Fixes: WIFI-15765
Signed-off-by: crychic.tan <crychic.tan@cybertan.com.tw>
@crychic-cybertan
crychic-cybertan force-pushed the staging-WIFI-15765-ucentral-lldpd-update-to-1-0-20 branch from 1e94fa8 to 3362d49 Compare October 27, 2026 05:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants