Skip to content
OpenAdvisories
Medium ELSA-2020-4619 1 CVE

Moderate: frr security and bug fix update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Summary

[7.0-10]
- Resolves: #1867793 - FRR does not conform to the source port range specified in RFC5881

[7.0-9]
- Resolves: #1852476 - default permission issue eases information leaks

[7.0-8]
- Resolves: #1819319 - frr fails to start start if the initscripts package is missing

[7.0-7]
- Resolves: #1758544 - IGMPv3 queries may lead to DoS

[7.0-6]
- Resolves: #1776342 - frr has missing dependency on iproute

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 frr 0:7.0-10.el8
Oracle Linux · 8 frr-contrib 0:7.0-10.el8

Vulnerabilities 1

  • Unscored —

    An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, t…