FEDORA-2023-ce436d56f8 — security update for frr

stable

frr-8.5.3-1.fc37

FEDORA-2023-ce436d56f8 created by mruprich a year ago for Fedora 37

New version 8.5.3.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-ce436d56f8

This update has been submitted for testing by mruprich.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

mruprich edited this update.

a year ago

mruprich edited this update.

a year ago

mruprich edited this update.

a year ago

This update's test gating status has been changed to 'failed'.

a year ago

This update has been pushed to testing.

a year ago

This update's test gating status has been changed to 'passed'.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

modified

a year ago

approved

a year ago

Builds

frr-8.5.3-1.fc37

BZ#2227599 frr-9.0.1 is available

BZ#2230983 CVE-2023-38802 frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

BZ#2235839 CVE-2023-41358 frr: processes invalid NLRIs if attribute length is zero

BZ#2235840 CVE-2023-41359 frr: out of bounds read in bgp_attr_aigp_valid

BZ#2235842 CVE-2023-41360 frr: ahead-of-stream read of ORF header

BZ#2236442 CVE-2023-38802 frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router [fedora-all]

BZ#2236464 CVE-2023-41358 frr: processes invalid NLRIs if attribute length is zero [fedora-all]

BZ#2236470 CVE-2023-41360 frr: ahead-of-stream read of ORF header [fedora-all]

BZ#2236471 CVE-2023-41359 frr: out of bounds read in bgp_attr_aigp_valid [fedora-all]

BZ#2237416 CVE-2023-41909 frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c

BZ#2238409 CVE-2023-41909 frr: NULL pointer dereference [fedora-all]

BZ#2238990 CVE-2023-31489 frr: incorrect length check in bgp_capability_llgr() can lead do DoS

BZ#2238991 CVE-2023-31489 frr: incorrect length check in bgp_capability_llgr() can lead do DoS [fedora-all]

BZ#2238992 CVE-2023-31490 frr: missing length check in bgp_attr_psid_sub() can lead do DoS

BZ#2238993 CVE-2023-31490 frr: missing length check in bgp_attr_psid_sub() can lead do DoS [fedora-all]

frr-8.5.3-1.fc37

Automated Test Results

passed