UbuntuUpdates.org

Package "frr"

Name: frr

Description:

FRRouting suite of internet protocols (BGP, OSPF, IS-IS, ...)
Latest version: 8.4.2-1ubuntu1.6
Release: lunar (23.04)
Level: updates
Repository: main
Homepage: https://www.frrouting.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "frr"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "frr" in Lunar

Repository Area Version
base main 8.4.2-1ubuntu1
base universe 8.4.2-1ubuntu1
security main 8.4.2-1ubuntu1.6
security universe 8.4.2-1ubuntu1.6
updates universe 8.4.2-1ubuntu1.6

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 8.4.2-1ubuntu1.1 2023-06-05 16:07:31 UTC

  frr (8.4.2-1ubuntu1.1) lunar-security; urgency=medium

  * SECURITY UPDATE: denial of service via bgp_capability_llgr()
    - debian/patches/CVE-2023-31489.patch: check 7 bytes for Long-lived
      Graceful-Restart capability in bgpd/bgp_open.c.
    - CVE-2023-31489
  * SECURITY UPDATE: denial of service via bgp_attr_psid_sub()
    - debian/patches/CVE-2023-31490.patch: ensure stream received has
      enough data in bgpd/bgp_attr.c.
    - CVE-2023-31490

 -- Marc Deslauriers <email address hidden> Fri, 02 Jun 2023 13:14:57 -0400
CVE-2023-31489 An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
CVE-2023-31490 An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.


About   -   Send Feedback to @ubuntu_updates