This bug was fixed in the package frr - 8.4.4-1.1ubuntu6.8
---------------
frr (8.4.4-1.1ubuntu6.8) noble-security; urgency=medium
* SECURITY REGRESSION: RPKI updates ignored after the first VRP record
(LP: #2172964)
- debian/patches/CVE-2024-55553-regression.patch: re-arm the RPKI sync
socket read in bgpd_sync_callback() so that VRP changes revalidate
routes again, and make the RPKI thread callbacks return void, in
bgpd/bgp_rpki.c.
- CVE-2024-55553
-- John Breton <[email protected]> Wed, 04 Nov 2026 08:14:38
-0500
** Changed in: frr (Ubuntu Noble)
Status: In Progress => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2024-55553
** Changed in: frr (Ubuntu Jammy)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172964
Title:
frr: CVE-2024-55553 backport stops RPKI revalidation after the first
VRP update (noble, jammy) and breaks the RPKI module (focal ESM)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/frr/+bug/2172964/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
