[ubuntu/mantic-security] frr 8.4.4-1.1ubuntu1.1 (Accepted)

[Marc Deslauriers]

frr (8.4.4-1.1ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: DoS via MP_REACH_NLRI data
    - debian/patches/CVE-2023-46752.patch: handle MP_REACH_NLRI malformed
      packets with session reset in bgpd/bgp_attr.c, bgpd/bgp_attr.h,
      bgpd/bgp_packet.c.
    - CVE-2023-46752
  * SECURITY UPDATE: DoS via BGP UPDATE without mandatory attributes
    - debian/patches/CVE-2023-46753.patch: check mandatory attributes more
      carefully for UPDATE message in bgpd/bgp_attr.c.
    - CVE-2023-46753

Date: 2023-11-01 19:01:09.240084+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/frr/8.4.4-1.1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.