{"affected":[{"ecosystem_specific":{"binaries":[{"frr":"7.4-150300.4.3.1","frr-devel":"7.4-150300.4.3.1","libfrr0":"7.4-150300.4.3.1","libfrr_pb0":"7.4-150300.4.3.1","libfrrcares0":"7.4-150300.4.3.1","libfrrfpm_pb0":"7.4-150300.4.3.1","libfrrgrpc_pb0":"7.4-150300.4.3.1","libfrrospfapiclient0":"7.4-150300.4.3.1","libfrrsnmp0":"7.4-150300.4.3.1","libfrrzmq0":"7.4-150300.4.3.1","libmlag_pb0":"7.4-150300.4.3.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.3","name":"frr","purl":"purl:rpm/suse/frr&distro=openSUSE%20Leap%2015.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"7.4-150300.4.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for frr fixes the following issues:\n\n- CVE-2022-26125, CVE-2022-26126: Fixed buffer overflows in unpack_tlv_router_cap() (bsc#1196505, bsc#1196506).\n- CVE-2022-26127: Fixed heap buffer overflow in babel_packet_examin() (bsc#1196503).\n- CVE-2022-26128: Fixed buffer overflows in babel_packet_examin() (bsc#1196507).\n- CVE-2022-26129: Fixed buffer overflows in parse_hello_subtlv(), parse_ihu_subtlv() and parse_update_subtlv() (bsc#1196504).\n","id":"openSUSE-SU-2022:0901-1","modified":"2022-03-18T11:02:05Z","published":"2022-03-18T11:02:05Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IMU2X5TQEN42TVGMLEB32I5WD3N5Z2FU/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1180217"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196503"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196504"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196505"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196506"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196507"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26125"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26126"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26127"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26128"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26129"}],"related":["CVE-2022-26125","CVE-2022-26126","CVE-2022-26127","CVE-2022-26128","CVE-2022-26129"],"summary":"Security update for frr"}