Stay Secure with the Latest Linux Advisories

security advisorysecurity updateRed Hat Enterprise Linux

Red Hat: RHSA-2023-5465-01 Important: frr BGP Parsing Error Fix

An update for frr is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: frr security update Advisory ID: RHSA-2023:5465-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5465 Issue date: 2023-10-05 CVE Names: CVE-2023-38802 ===================================================================== 1. Summary: An update for frr is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream AUS (v. 8.2) - x86_64 Red Hat Enterprise Linux AppStream E4S (v. 8.2) - ppc64le, x86_64 Red Hat Enterprise Linux AppStream TUS (v. 8.2) - x86_64 3. Description: FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes thechanges described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2230983 - CVE-2023-38802 frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router 6. Package List: Red Hat Enterprise Linux AppStream AUS (v. 8.2): Source: frr-7.0-5.el8_2.1.src.rpm x86_64: frr-7.0-5.el8_2.1.x86_64.rpm frr-contrib-7.0-5.el8_2.1.x86_64.rpm frr-debuginfo-7.0-5.el8_2.1.x86_64.rpm frr-debugsource-7.0-5.el8_2.1.x86_64.rpm Red Hat Enterprise Linux AppStream E4S (v. 8.2): Source: frr-7.0-5.el8_2.1.src.rpm ppc64le: frr-7.0-5.el8_2.1.ppc64le.rpm frr-contrib-7.0-5.el8_2.1.ppc64le.rpm frr-debuginfo-7.0-5.el8_2.1.ppc64le.rpm frr-debugsource-7.0-5.el8_2.1.ppc64le.rpm x86_64: frr-7.0-5.el8_2.1.x86_64.rpm frr-contrib-7.0-5.el8_2.1.x86_64.rpm frr-debuginfo-7.0-5.el8_2.1.x86_64.rpm frr-debugsource-7.0-5.el8_2.1.x86_64.rpm Red Hat Enterprise Linux AppStream TUS (v. 8.2): Source: frr-7.0-5.el8_2.1.src.rpm x86_64: frr-7.0-5.el8_2.1.x86_64.rpm frr-contrib-7.0-5.el8_2.1.x86_64.rpm frr-debuginfo-7.0-5.el8_2.1.x86_64.rpm frr-debugsource-7.0-5.el8_2.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-38802 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIcBAEBCAAGBQJlHtW6AAoJENzjgjWX9erEtzEP/i4qxHqNMA7jFK2Y01ZsM5j2 HF+ZsNvbZPlJcqrkA7EunQhgMlagnRYyywPsKHIZEDP2U8pbV5Af8pGB1UUFAocZ 3+0qEJOelhXXEEHESjhx12fDMGnI/H3Ok6FtW0lYFkyhGnImJ7y3GY1YwIE8IaDC 2hRgSPvi0YdSbUA2B2rDJRxO36eMBryp6NEuG7OB35iCIotHLEx2pRCy2Mz6yaG0 YtlQikqaReuzzU4Xftg3B7fn+cS2WCH+E9Qsyv/mrGAVrAfCWAstoPWA4qYlNZgB x6iSf7Vi3QF4DyHdAwtRf+cBIwKgzmF6pUKFCpcoaes7DvD4GpswGsnSbszZ1Zru y4ZW1ZvMBQF2n+3fjANWskX9e/sKc9diDkHV9L/H6UFWKRhDtQ9WqifNoFgPxoHU 5DW6iUtW/dCqBKNEjIfqNj+RX9iMYMglLPW9xn9Sw/JcEwU3i6h0+D5shecz6eG6 6LMRnXaNnmw/Lo1LWa4u9EkVQOmKTJNG0vjbMNd4G/jb5/oDAVb+SiGYsmUkEZIy GTBWzXnPMluYZQH/1wu1l+DjKPe31XVkjObOqLbW9fVSZpwK9aft0e8zmTHjiRV9 OXQu1lP4tHzbqVVxv0bvqjitG3AYENxI1dAuMxznVJyL9ZgH8cT9kac1BmbzwfXc 3YxNLhWc8a9lJr/+NpOT =q357 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Canonical unveils critical patch for OpenSSH, resolving SSH key handling vulnerabilities. Refer to the notice for specifics.. Red Hat, frr routing, security update. . Severity: Important. LinuxSecurity.com Team

Oct 05, 2023 •Important Red Hat