Ubuntu FRR Update Restores RPKI Processing on Affected Systems

Two serious PHP flaws could let an attacker run code without logging in. See which setups and PHP versions are affected ×

USN-7230-2 introduced a regression in FRR Software Description: - frr: FRRouting suite of internet protocols Details: USN-7230-2 fixed vulnerabilities in FRR. Unfortunately, the fix for CVE-2024-55553 introduced a regression in RPKI support, causing FRR to stop processing RPKI updates after the first one, so routes were not revalidated when RPKI data changed. In Ubuntu 20.04 LTS, the BGP daemon also failed to start when the RPKI module was enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Iggy Frankovic discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2024-44070) It was discovered that FRR re-validated all routes in certain instances when the internal socket's buffer size overflowed. A remote attacker could possibly use this issue to impact the performa... Read the Full Advisory

USN-7230-2 introduced a regression in FRR

Software Description:

- frr: FRRouting suite of internet protocols

USN-7230-2 fixed vulnerabilities in FRR. Unfortunately, the fix for

CVE-2024-55553 introduced a regression in RPKI support, causing FRR to stop

processing RPKI updates after the first one, so routes were not revalidated

when RPKI data changed. In Ubuntu 20.04 LTS, the BGP daemon also failed to

start when the RPKI module was enabled. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Iggy Frankovic discovered that FRR incorrectly handled certain BGP

messages. A remote attacker could possibly use this issue to cause FRR to

crash, resulting in a denial of service. This issue only affected Ubuntu

20.04 LTS. (CVE-2024-44070)

It was discovered that FRR re-validated all routes in certain instances

when the internal socket's buffer size overflowed. A remote attacker could

possibly use this issue to impact the performa...

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS frr-rpki-rtrlib 8.4.4-1.1ubuntu6.8 Ubuntu 22.04 LTS frr-rpki-rtrlib 8.1-1ubuntu1.17 Ubuntu 20.04 LTS frr 7.2.1-1ubuntu0.2+esm5 Available with Ubuntu Pro frr-rpki-rtrlib 7.2.1-1ubuntu0.2+esm5 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-7230-3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases