Linux · Security advisory · April 30, 2024

RHSA-2024:2156: Security update for 2 packages

RHSA-2024:2156, released April 30, 2024, fixes 8 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
8
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0215
82nd percentile

Priority of the 8 CVEs

Patch now 0 Urgent 1 High 5 Routine 2

Fixed package versions

ProductReleaseFixed in
frrRHEL 90:8.5.3-4.el9
frr-selinuxRHEL 90:8.5.3-4.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2023-41360 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 9.1 0.0115 None reported
High CVE-2023-31490 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0215 None reported
High CVE-2023-41358 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0125 None reported
High CVE-2023-41909 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0112 None reported
High CVE-2023-46752 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0102 None reported
High CVE-2023-46753 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0094 None reported
Routine CVE-2023-41359 frr: FRRouting is free software that manages TCP/IP based routing protocols 5.9 0.0115 None reported
Routine CVE-2023-31489 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 5.5 0.0103 None reported
Showing 1 to 8 of 8 1