Linux · Security advisory · January 12, 2024

RLSA-2024:0130: frr security update

RLSA-2024:0130, released January 12, 2024, fixes 4 CVEs in frr (version 0:7.5.1-13.el8_9.3). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0110
65th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
frrrocky 80:7.5.1-13.el8_9.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-47234 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0110 None reported
High CVE-2023-38406 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 9.8 0.0094 None reported
High CVE-2023-38407 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0093 None reported
High CVE-2023-47235 frr: This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-... 7.5 0.0079 None reported
Showing 1 to 4 of 4 1