[ubuntu/oracular-proposed] frr 10.0.1-0.1ubuntu2 (Accepted)

[Marc Deslauriers]

frr (10.0.1-0.1ubuntu2) oracular; urgency=medium

  * SECURITY UPDATE: BGP overflow via TLV value
    - debian/patches/CVE-2024-44070.patch: check the actual remaining
      stream length before taking TLV value in bgpd/bgp_attr.c.
    - CVE-2024-44070

Date: Tue, 10 Sep 2024 07:35:31 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/frr/10.0.1-0.1ubuntu2
-------------- next part --------------
Format: 1.8
Date: Tue, 10 Sep 2024 07:35:31 -0400
Source: frr
Built-For-Profiles: noudeb
Architecture: source
Version: 10.0.1-0.1ubuntu2
Distribution: oracular
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 frr (10.0.1-0.1ubuntu2) oracular; urgency=medium
 .
   * SECURITY UPDATE: BGP overflow via TLV value
     - debian/patches/CVE-2024-44070.patch: check the actual remaining
       stream length before taking TLV value in bgpd/bgp_attr.c.
     - CVE-2024-44070
Checksums-Sha1:
 bea815dfcae33d60ac775df2e9218d7fcc60d233 2852 frr_10.0.1-0.1ubuntu2.dsc
 0a8e1dab1cb5c1f6d58aff2e47fa49ac6da8da7c 35800 frr_10.0.1-0.1ubuntu2.debian.tar.xz
 c93ce14cb802b660198a3c6770ca82dd44b5889e 10310 frr_10.0.1-0.1ubuntu2_source.buildinfo
Checksums-Sha256:
 5c178b70e2e9b09c2862fad821fe581f8db48288464d0aee2943e6a30ca5db2d 2852 frr_10.0.1-0.1ubuntu2.dsc
 c2901afd63fb91e64fe39a6a27a08c1b31a1771fe57adbf81b396a11a94a8f00 35800 frr_10.0.1-0.1ubuntu2.debian.tar.xz
 886846fab0d2e8c2757a1fb48499942e9a6eac51716a6d94333d6bf27d1b6a67 10310 frr_10.0.1-0.1ubuntu2_source.buildinfo
Files:
 68b5071cc07522e03d52303157cf7be7 2852 net optional frr_10.0.1-0.1ubuntu2.dsc
 9053f277f74aba5917ebb784a27f99bb 35800 net optional frr_10.0.1-0.1ubuntu2.debian.tar.xz
 6af5a7d434879a343ec25621f1bc609c 10310 net optional frr_10.0.1-0.1ubuntu2_source.buildinfo
Original-Maintainer: David Lamparter <equinox-debian at diac24.net>