Skip to content

Update DNX SAI version to 14.1.0.1.0.0.0.1 #25008

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rlhui merged 2 commits into from
Jan 28, 2026
Merged

Update DNX SAI version to 14.1.0.1.0.0.0.1 #25008

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5fdfac2
Update DNX SAI version to 14.1.0.1.0.0.0.1
tjchadaga Jan 8, 2026
9ec73e8
Merge branch 'master' into sai_14_update
vmittal-msft Jan 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion platform/broadcom/sai-dnx.mk
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Broadcom DNX SAI definitions
LIBSAIBCM_DNX_VERSION = 14.1.0.1.0.0.0.0
LIBSAIBCM_DNX_VERSION = 14.1.0.1.0.0.0.1
LIBSAIBCM_DNX_BRANCH_NAME = SAI_14.1.0_GA

LIBSAIBCM_DNX_URL_PREFIX = "https://packages.trafficmanager.net/public/sai/sai-broadcom/$(LIBSAIBCM_DNX_BRANCH_NAME)/$(LIBSAIBCM_DNX_VERSION)/dnx"
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LIBSAIBCM_DNX_URL_PREFIX points to a remote .deb host that is consumed via $(BRCM_DNX_SAI)_URL and SONIC_ONLINE_DEBS, which the generic build logic fetches with curl and installs without any checksum or signature verification. If packages.trafficmanager.net (or its TLS/DNS) is compromised, an attacker could serve a malicious libsaibcm_dnx package that is transparently pulled into SONiC images and executed with full privileges during build and at runtime. To harden the supply chain, ensure this downloaded package is protected by strong integrity verification (for example, pinned content hashes or verified signatures) or is sourced from a repository/mechanism that enforces such verification.

Copilot uses AI. Check for mistakes.
Expand Down
Loading