Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 39: FEDORA-2024-0c063be1cc Critical: frr Buffer Overflow

fedora
Calendar Grey August 11, 2024
Dist Fedora Esm H88
The Fedora 39 release featuring frr version 8.5.5 brings essential bug resolutions and improvements across various routing protocols.
New version 8.5.5

Summary

FRRouting is free software that manages TCP/IP based routing protocols. It takes

a multi-server and multi-threaded approach to resolve the current complexity

of the Internet.

FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR,

EIGRP and BFD.

FRRouting is a fork of Quagga.

Update Information:

New version 8.5.5

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora update information routing daemon daemon crash frr

Change Log

* Wed Jul 31 2024 Michal Ruprich - 8.5.5-1 - New version 8.5.5 * Wed Jan 3 2024 Michal Ruprich - 8.5.4-1 - New version 8.5.4

References


[ 1 ] Bug #2273983 - CVE-2024-31948 frr: bgpd daemon crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2273983 [ 2 ] Bug #2273996 - CVE-2024-31950 frr: buffer overflow and daemon crash in ospf_te_parse_ri [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2273996 [ 3 ] Bug #2274000 - CVE-2024-31951 frr: buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2274000

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-0c063be1cc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: frr
Product: Fedora 39
Version: 8.5.5
Release: 1.fc39
URL: http://www.frrouting.org
Summary: Routing daemon

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora update information routing daemon daemon crash frr

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here