Ubuntu patches FRR regression that stopped RPKI route revalidation
PATCHUbunturedteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
USN-7230-3 fixes a regression introduced by the USN-7230-2 patch for CVE-2024-55553, an FRR issue where a socket buffer overflow caused all routes to be revalidated, leading to a performance denial of service. The regression stopped FRR processing RPKI updates after the first, so routes were not revalidated on RPKI data changes, and on Ubuntu 20.04 LTS the BGP daemon failed to start with the RPKI module enabled. CVE-2024-44070 (crash via malformed BGP messages, Ubuntu 20.04 LTS only) is also covered. Defenders running FRR on affected Ubuntu releases should apply USN-7230-3.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Apply the Ubuntu security update USN-7230-3 to FRR.
- Check whether systems running FRR use RPKI route validation, as the regression affected it.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Thu 5 NovemberUSN-7230-3: FRR regressionUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products