Описание
Security update for frr
This update for frr fixes the following issues:
- CVE-2023-31489: Fixed a remote denial of service via a malformed BGP packet (bsc#1211248).
- CVE-2023-31490: Fixed a remote denial of service via a malformed BGP packet (bsc#1211249).
Список пакетов
SUSE Linux Enterprise Module for Server Applications 15 SP5
frr-8.4-150500.4.3.1
frr-devel-8.4-150500.4.3.1
libfrr0-8.4-150500.4.3.1
libfrr_pb0-8.4-150500.4.3.1
libfrrcares0-8.4-150500.4.3.1
libfrrfpm_pb0-8.4-150500.4.3.1
libfrrospfapiclient0-8.4-150500.4.3.1
libfrrsnmp0-8.4-150500.4.3.1
libfrrzmq0-8.4-150500.4.3.1
libmlag_pb0-8.4-150500.4.3.1
openSUSE Leap 15.5
frr-8.4-150500.4.3.1
frr-devel-8.4-150500.4.3.1
libfrr0-8.4-150500.4.3.1
libfrr_pb0-8.4-150500.4.3.1
libfrrcares0-8.4-150500.4.3.1
libfrrfpm_pb0-8.4-150500.4.3.1
libfrrospfapiclient0-8.4-150500.4.3.1
libfrrsnmp0-8.4-150500.4.3.1
libfrrzmq0-8.4-150500.4.3.1
libmlag_pb0-8.4-150500.4.3.1
Ссылки
- Link for SUSE-SU-2023:2518-1
- E-Mail link for SUSE-SU-2023:2518-1
- SUSE Security Ratings
- SUSE Bug 1211248
- SUSE Bug 1211249
- SUSE CVE CVE-2023-31489 page
- SUSE CVE CVE-2023-31490 page
Описание
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-8.4-150500.4.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel-8.4-150500.4.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0-8.4-150500.4.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0-8.4-150500.4.3.1
Ссылки
- CVE-2023-31489
- SUSE Bug 1211248
Описание
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.
Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-8.4-150500.4.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP5:frr-devel-8.4-150500.4.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr0-8.4-150500.4.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP5:libfrr_pb0-8.4-150500.4.3.1
Ссылки
- CVE-2023-31490
- SUSE Bug 1211249