[ubuntu/mantic-proposed] frr 8.4.2-1ubuntu2 (Accepted)

[Marc Deslauriers]

frr (8.4.2-1ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: denial of service via bgp_capability_llgr()
    - debian/patches/CVE-2023-31489.patch: check 7 bytes for Long-lived
      Graceful-Restart capability in bgpd/bgp_open.c.
    - CVE-2023-31489
  * SECURITY UPDATE: denial of service via bgp_attr_psid_sub()
    - debian/patches/CVE-2023-31490.patch: ensure stream received has
      enough data in bgpd/bgp_attr.c.
    - CVE-2023-31490

Date: Fri, 02 Jun 2023 13:14:57 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/frr/8.4.2-1ubuntu2
-------------- next part --------------
Format: 1.8
Date: Fri, 02 Jun 2023 13:14:57 -0400
Source: frr
Built-For-Profiles: noudeb
Architecture: source
Version: 8.4.2-1ubuntu2
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 frr (8.4.2-1ubuntu2) mantic; urgency=medium
 .
   * SECURITY UPDATE: denial of service via bgp_capability_llgr()
     - debian/patches/CVE-2023-31489.patch: check 7 bytes for Long-lived
       Graceful-Restart capability in bgpd/bgp_open.c.
     - CVE-2023-31489
   * SECURITY UPDATE: denial of service via bgp_attr_psid_sub()
     - debian/patches/CVE-2023-31490.patch: ensure stream received has
       enough data in bgpd/bgp_attr.c.
     - CVE-2023-31490
Checksums-Sha1:
 60b4f29bb2241694bebbef36d72ac021c1a5386c 2807 frr_8.4.2-1ubuntu2.dsc
 d867416e659b4d4f83dc4ab91f497934d90d6de4 34132 frr_8.4.2-1ubuntu2.debian.tar.xz
 d5a03864e2e68014a9d75527726905b3701ce0b4 9619 frr_8.4.2-1ubuntu2_source.buildinfo
Checksums-Sha256:
 f1b19604187aa6e3a85bc9db205ae608c6c135804f7d37b0f9cdba22bbf168cd 2807 frr_8.4.2-1ubuntu2.dsc
 cc277115d2486fbec871e3b0a32fca629d533ce68223da7f34cfe1ee83719529 34132 frr_8.4.2-1ubuntu2.debian.tar.xz
 adc8d217c100d004f7a8562ee9404f1e21190f145fe72b82a36c86c61a2e6a25 9619 frr_8.4.2-1ubuntu2_source.buildinfo
Files:
 00fb4f60b339304becfa9705b2f447bb 2807 net optional frr_8.4.2-1ubuntu2.dsc
 144708dc111bb4bd8bff823d2ba6e97a 34132 net optional frr_8.4.2-1ubuntu2.debian.tar.xz
 643e06c546ea1d864e43895927739b44 9619 net optional frr_8.4.2-1ubuntu2_source.buildinfo
Original-Maintainer: David Lamparter <equinox-debian at diac24.net>