[USN-6794-1] FRR vulnerabilities

-----BEGIN PGP SIGNATURE-----
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=PcsA
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6794-1
May 28, 2024

frr vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 23.10
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in FRR.

Software Description:
- frr: FRRouting suite of internet protocols

Details:

It was discovered that FRR incorrectly handled certain malformed BGP and
OSPF packets. A remote attacker could use this issue to cause FRR to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
frr 8.4.4-1.1ubuntu6.1

Ubuntu 23.10
frr 8.4.4-1.1ubuntu1.4

Ubuntu 22.04 LTS
frr 8.1-1ubuntu1.10

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6794-1
CVE-2024-31948, CVE-2024-31950, CVE-2024-31951, CVE-2024-34088

Package Information:
https://launchpad.net/ubuntu/+source/frr/8.4.4-1.1ubuntu6.1
https://launchpad.net/ubuntu/+source/frr/8.4.4-1.1ubuntu1.4
https://launchpad.net/ubuntu/+source/frr/8.1-1ubuntu1.10