Red Hat Product Errata RHSA-2024:0130 - Security Advisory
Issued:
2024-01-10
Updated:
2024-01-10

RHSA-2024:0130 - Security Advisory

Synopsis

Moderate: frr security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for frr is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

  • ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)
  • ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)
  • frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)
  • frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 2248207 - CVE-2023-47235 frr: crash from malformed EOR-containing BGP UPDATE message
  • BZ - 2248208 - CVE-2023-47234 frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  • BZ - 2248526 - CVE-2023-38406 ffr: Flowspec overflow in bgpd/bgp_flowspec.c
  • BZ - 2248528 - CVE-2023-38407 ffr: Out of bounds read in bgpd/bgp_label.c

Red Hat Enterprise Linux for x86_64 8

SRPM
frr-7.5.1-13.el8_9.3.src.rpm SHA-256: 27f5bc33f74536737294d296b30e4b8971850a76e2a0469e637a7ffbfb12dfe9
x86_64
frr-7.5.1-13.el8_9.3.x86_64.rpm SHA-256: ed3983ab7aa9c48cb9fbb0aedba56cfb4548a82d964a6bd10bcb823c5dd53c20
frr-debuginfo-7.5.1-13.el8_9.3.x86_64.rpm SHA-256: 73146759e72f1b468a76cf82d06e07c155335a3cf29898d87b2caa1f31195a83
frr-debugsource-7.5.1-13.el8_9.3.x86_64.rpm SHA-256: 5aa073fefcf12b1188b8e813443d21285cdffa551ba94d8b8fe5343c00525395
frr-selinux-7.5.1-13.el8_9.3.noarch.rpm SHA-256: f4568268d9fec271580a98bc0ef8e4cf3f255cc33ff89ad967ed27b2f98e0b7e

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
frr-7.5.1-13.el8_9.3.src.rpm SHA-256: 27f5bc33f74536737294d296b30e4b8971850a76e2a0469e637a7ffbfb12dfe9
s390x
frr-7.5.1-13.el8_9.3.s390x.rpm SHA-256: 4d04e82f6036a18d5566b6b8b68656f5cff6ba779e2a49151a2dcd57c4614758
frr-debuginfo-7.5.1-13.el8_9.3.s390x.rpm SHA-256: bec42cf63ef4632de49d3f2a0c93fd663f7aa3d0d26e4b045e1be2f4b30d99e8
frr-debugsource-7.5.1-13.el8_9.3.s390x.rpm SHA-256: ebe2a9671b710626d14a44623b176f4dc8c9e4be164e1f443eba00c753549a7b
frr-selinux-7.5.1-13.el8_9.3.noarch.rpm SHA-256: f4568268d9fec271580a98bc0ef8e4cf3f255cc33ff89ad967ed27b2f98e0b7e

Red Hat Enterprise Linux for Power, little endian 8

SRPM
frr-7.5.1-13.el8_9.3.src.rpm SHA-256: 27f5bc33f74536737294d296b30e4b8971850a76e2a0469e637a7ffbfb12dfe9
ppc64le
frr-7.5.1-13.el8_9.3.ppc64le.rpm SHA-256: e2d70bdd51d22c73de4aba3f7edea95e50e1d3a215d8e485d7434a3c8f927941
frr-debuginfo-7.5.1-13.el8_9.3.ppc64le.rpm SHA-256: 4919137f53025986a3400d454b55917286977116ec6c4bcac82e10ddd3716ec1
frr-debugsource-7.5.1-13.el8_9.3.ppc64le.rpm SHA-256: 7360a73ba33c7e40be88b10b4334485eaaad8814deeb4ee5deb213d987eccff5
frr-selinux-7.5.1-13.el8_9.3.noarch.rpm SHA-256: f4568268d9fec271580a98bc0ef8e4cf3f255cc33ff89ad967ed27b2f98e0b7e

Red Hat Enterprise Linux for ARM 64 8

SRPM
frr-7.5.1-13.el8_9.3.src.rpm SHA-256: 27f5bc33f74536737294d296b30e4b8971850a76e2a0469e637a7ffbfb12dfe9
aarch64
frr-7.5.1-13.el8_9.3.aarch64.rpm SHA-256: 7cf6ed040e2847c475a9a8240c50e03330ae570dc5f2dc4c4eab775d82d3ff62
frr-debuginfo-7.5.1-13.el8_9.3.aarch64.rpm SHA-256: 4111feffd6bbcf396dc17e131269387ab42cd24e7137bdc66816e226d6c8b357
frr-debugsource-7.5.1-13.el8_9.3.aarch64.rpm SHA-256: 0f0339889f56bb1f491b10186c81e2ad90e2283675a906e4cc4fc4f5bab7c3f3
frr-selinux-7.5.1-13.el8_9.3.noarch.rpm SHA-256: f4568268d9fec271580a98bc0ef8e4cf3f255cc33ff89ad967ed27b2f98e0b7e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.