Defects
The defects that have been resolved in this release are detailed in this section.
Resolved security vulnerability
Security issues have been resolved in this release.
| Key | CVSS | Advisory | Summary |
|---|---|---|---|
| VRVDR-57273 | 7.5 | DSA-5105-1 | CVE-2021-25220, CVE-2022-0396: Debian DSA-5105-1 : bind9 - security update |
| VRVDR-57189 | 5.5 | DSA-5095-1 | CVE-2020-36310, CVE-2022-0001, CVE-2022-0002, CVE-2022-0487: Debian DSA-5095-1: linux – security update |
| VRVDR-57161 | 5.5 | DSA-5092-1 | CVE-2021-43976, CVE-2022-0330, CVE-2022-0435, CVE-2022-0516, CVE-2022-0847, CVE-2022-22942, CVE-2022-24448, CVE-2022-24959, CVE-2022-25258, CVE-2022-25375: Debian DSA-5092-1: linux – security update |
| VRVDR-57078 | 9.8 | DSA-5085-1 | CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315: Debian DSA-5085-1 : expat - security update |
| VRVDR-57000 | 8.8 | DSA-5073-1 | CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827, CVE-2022-23852, CVE-2022-23990: Debian DSA-5073-1 : expat - security update |
| VRVDR-56909 | 7.8 | DSA-5059-1 | CVE-2021-4034: DLA-2899-1 and DSA 5059-1 policykit-1 security update |
| VRVDR-56903 | 9.1 | DSA-5056-1 | CVE-2021-45079: DSA-5056-1: strongswan security update |
| VRVDR-56878 | 6.4 | DSA-5050-1 | CVE-2021-4155, CVE-2021-28711, CVE-2021-28712, CVE-2021-28713, CVE-2021-28714, CVE-2021-28715, CVE-2021-39685, CVE-2021-45095, CVE-2021-45469, CVE-2021-45480, CVE-2022-0185, CVE-2022-23222: DSA-5050-1: linux – security update |
| VRVDR-56333 | N/A | N/A | system-user-login: User-enumeration possible when auto-disable feature is enabled |
| VRVDR-55896 | 7.4 | DLA-2674-1 | CVE-2021-25217: Debian DLA-2674-1: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient |
| VRVDR-55761 | 7.8 | DSA-4941-1 | CVE-2020-36311, CVE-2021-3609, CVE-2021-33909, CVE-2021-34693: Debian DSA-4941-1: linux security update |
Resolved issues
Customer issues have been resolved in this release.
| Key | Priority | Summary |
|---|---|---|
| VRVDR-56806 | Minor | Command show dataplane multicast ipv6 interface - counter is not displaying multicast traffic correctly |
| VRVDR-56802 | Major | Commit time is 2 minutes for any change in the configuration with large number of VIFs and QOS policies |
| VRVDR-56682 | Critical | SNAT SIP ALG misinterprets SDP part of packet payload header causing dataplane crash |
| VRVDR-56576 | Critical | Dataplane crash while capturing traffic |
| VRVDR-56565 | Major | NTP is spamming the journal, preventing retention of useful information |
| VRVDR-56188 | Critical | bgpd dumps core when setting password for peer group |
| VRVDR-55054 | Minor | Interface doesn't go down when the Rx level reaches the threshold value |
Known issues
The known issues in this release have been identified.
| Key | Priority | Summary |
|---|---|---|
| VRVDR-56563 | Critical | Frequent flapping of all BGP peers due to BFD failure |