Security update for frr
Announcement ID: | SUSE-SU-2023:4663-1 |
---|---|
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves four vulnerabilities can now be installed.
Description:
This update for frr fixes the following issues:
- CVE-2023-47235: Fixed denial of service caused by malformed BGP UPDATE message with an EOR is processed (bsc#1216896).
- CVE-2023-47234: Fixed denial of service caused by crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute (bsc#1216897).
- CVE-2023-38407: Fixed read beyond the end of the stream during labeled unicast parsing (bsc#1216899).
- CVE-2023-38406: Fixed mishandling of nlri length of zero, aka a "flowspec overflow (bsc#1216900).
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.5
zypper in -t patch SUSE-2023-4663=1 openSUSE-SLE-15.5-2023-4663=1
-
Server Applications Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2023-4663=1
Package List:
-
openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)
- frr-debugsource-8.4-150500.4.15.1
- libfrr0-debuginfo-8.4-150500.4.15.1
- libfrrfpm_pb0-8.4-150500.4.15.1
- frr-8.4-150500.4.15.1
- libfrrsnmp0-8.4-150500.4.15.1
- libfrrcares0-debuginfo-8.4-150500.4.15.1
- libfrrospfapiclient0-8.4-150500.4.15.1
- libfrrsnmp0-debuginfo-8.4-150500.4.15.1
- frr-devel-8.4-150500.4.15.1
- libmlag_pb0-8.4-150500.4.15.1
- libfrrcares0-8.4-150500.4.15.1
- libfrrospfapiclient0-debuginfo-8.4-150500.4.15.1
- frr-debuginfo-8.4-150500.4.15.1
- libfrrfpm_pb0-debuginfo-8.4-150500.4.15.1
- libfrrzmq0-8.4-150500.4.15.1
- libmlag_pb0-debuginfo-8.4-150500.4.15.1
- libfrr0-8.4-150500.4.15.1
- libfrr_pb0-debuginfo-8.4-150500.4.15.1
- libfrr_pb0-8.4-150500.4.15.1
- libfrrzmq0-debuginfo-8.4-150500.4.15.1
-
Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64)
- frr-debugsource-8.4-150500.4.15.1
- libfrr0-debuginfo-8.4-150500.4.15.1
- libfrrfpm_pb0-8.4-150500.4.15.1
- frr-8.4-150500.4.15.1
- libfrrsnmp0-8.4-150500.4.15.1
- libfrrcares0-debuginfo-8.4-150500.4.15.1
- libfrrospfapiclient0-8.4-150500.4.15.1
- libfrrsnmp0-debuginfo-8.4-150500.4.15.1
- frr-devel-8.4-150500.4.15.1
- libmlag_pb0-8.4-150500.4.15.1
- libfrrcares0-8.4-150500.4.15.1
- libfrrospfapiclient0-debuginfo-8.4-150500.4.15.1
- frr-debuginfo-8.4-150500.4.15.1
- libfrrfpm_pb0-debuginfo-8.4-150500.4.15.1
- libfrrzmq0-8.4-150500.4.15.1
- libmlag_pb0-debuginfo-8.4-150500.4.15.1
- libfrr0-8.4-150500.4.15.1
- libfrr_pb0-debuginfo-8.4-150500.4.15.1
- libfrr_pb0-8.4-150500.4.15.1
- libfrrzmq0-debuginfo-8.4-150500.4.15.1
References:
- https://www.suse.com/security/cve/CVE-2023-38406.html
- https://www.suse.com/security/cve/CVE-2023-38407.html
- https://www.suse.com/security/cve/CVE-2023-47234.html
- https://www.suse.com/security/cve/CVE-2023-47235.html
- https://bugzilla.suse.com/show_bug.cgi?id=1216896
- https://bugzilla.suse.com/show_bug.cgi?id=1216897
- https://bugzilla.suse.com/show_bug.cgi?id=1216899
- https://bugzilla.suse.com/show_bug.cgi?id=1216900