Skip to content
OpenAdvisories
Medium ELSA-2023-2801 1 CVE

Moderate: frr security and bug fix update (Oracle Linux 8)

Published May 24, 2023 · Updated May 24, 2023

Summary

[7.5.1-7.0.1]
- Fix POSTIN scriptlet [Orabug: 34712485]

[7.5.1-7]
- Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service

[7.5.1-6]
- Resolves: #1939516 - frr service cannot reload itself, due to executing in the wrong SELinux context

[7.5.1-5]
- Resolves: #2127140 - Frr is unable to push routes to the system routing table

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 frr 0:7.5.1-7.0.1.el8
Oracle Linux · 8 frr-selinux 0:7.5.1-7.0.1.el8

Vulnerabilities 1

  • Unscored —
    CVE-2022-37032 Public exploit

    An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of serv…