This bug was fixed in the package frr - 8.1-1ubuntu1.17
---------------
frr (8.1-1ubuntu1.17) jammy-security; urgency=medium
* SECURITY REGRESSION: RPKI updates ignored after the first VRP record
(LP: #2172964)
- debian/patches/CVE-2024-55553-regression.patch: re-arm the RPKI sync
socket read in bgpd_sync_callback() in bgpd/bgp_rpki.c so that VRP
changes revalidate routes again.
- CVE-2024-55553
-- John Breton <[email protected]> Wed, 04 Nov 2026 08:15:27
-0500
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172964
Title:
frr: CVE-2024-55553 backport stops RPKI revalidation after the first
VRP update (noble, jammy) and breaks the RPKI module (focal ESM)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/frr/+bug/2172964/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
