Summary
[7.5.1-24.0.1]
- Fix POSTIN scriptlet [Orabug: 34712485]
[7.5.1-24]
- Fix off-by-one error in FlowSpec operator array bounds checking (CVE-2026-37457)
- Resolves: RHEL-174676
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | frr | 0:7.5.1-24.0.1.el8_10 |
| Oracle Linux · 8 | frr-selinux | 0:7.5.1-24.0.1.el8_10 |
Vulnerabilities 1
-
High 7.5
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of …