Ubuntu patches FRR regression that stopped RPKI route revalidation
PATCHUbunturedteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
USN-7230-3 corrects a regression introduced by the USN-7230-2 fix for CVE-2024-55553 in FRR. The regression stopped FRR processing RPKI updates after the first one, so routes were not revalidated when RPKI data changed, and on Ubuntu 20.04 LTS the BGP daemon failed to start with the RPKI module enabled. The original advisories cover a crash via crafted BGP messages (CVE-2024-44070, Ubuntu 20.04 LTS only) and a performance denial of service from route revalidation (CVE-2024-55553).
For IT people · Written by AI from 1 source · Wrong?
What to do
- Apply the Ubuntu security update USN-7230-3 to FRR.
- Check whether systems running FRR use RPKI route validation, as the regression affected it.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Thu 5 NovemberUSN-7230-3: FRR regressionUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products