Releases: FRRouting/frr
FRR Release 10.1.3
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Bug Fixes
bgpd
- Allow bfd to work if peer known but interface address not yet
- Apply route-map for aggregate before attribute comparison
- Do not start bgp session if bgp identifier is not set
- Don't reuse nexthop variable in loop/switch
- Fix a bug in peer_allowas_in_set()
- Fix add label support to evpn ad routes
- Fix bfd with update-source in peer-group
- Fix bgp orf prefix-list json prefix
- Fix crash in bgp_labelpool
- Fix crash in displaying json orf prefix-list
- Fix crash upon bgp network import-check command
- Fix deadlock in bgp_keepalive and master pthreads
- Fix for local interface mac cache issue in 'bgp mac hash' table
- Fix incorrect json in bgp_show_table_rd
- Fix memory leak in bgp_aggregate_install()
- Fix route-distinguisher in vrf leak json cmd
- Fix vty output of evpn route-target as4
- Fix wrong pthread event cancelling
- Remove dmed check not required in bestpath selection
- Reset bgp session only if it was a real bfd down event
- Update source address for bfd session
- Use igpmetric in bgp_aigp_metric_total()
- When bgp notices a change to shared_network inform bfd of it
- When removing the prefix list drop the pointer
- With suppress-fib-pending ensure withdrawal is sent
- Revert: Handle addpath capability using dynamic capabilities
- Revert: Reinstall aggregated routes if using route-maps and it was changed
fpm
- Guard against garbage in unused address bytes
isisd
- Allow full
no
form fordomain-password
andarea-password
- Correct edge insertion into ted
- Show correct level information for
show isis interface detail json
lib
- Crash handlers must be allowed on threads
- Fix false context information for srv6 route
- Guard against padding garbage in zapi read
mgmtd
- Prevent use after free
nhrpd
- Fix do not consider incomplete l2 entry
pbrd
- Initialize structs used in hash_lookup
pimd
- During prefix-list update, behave as pim_upstream_notjoined state (conformance issue)
- Fix dr election race on startup
- Fix for data packet loss when fhr is lhr and rp
- Fix for fhr mroute taking longer to age out
- Fix pim vrf support (send register/register stop in vrf)
- Fix pim6 mld vrf support (use recvmsg() pktinfo)
tools
- Add missing rpki keyword to vrf in frr-reload
- Fix frr-reload for ebgp-multihop ttl reconfiguration.
zebra
- Evpn svd hash avoid double free
- Fix resetting valid flags for nhg dependents
- Guard against junk in nexthop->rmap_src
- Include resolving nexthops in nhg hash
FRR Release 10.3
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Release Overview
New Features Highlight:
- Lua 5.4 support
- Fixed CVE-2024-55553
- New
match community-count
BGP command to limit communities count - New
set metric igp|aigp
BGP command to inject IGP metric as MED into BGP - New
bgp ipv6-auto-ra
BGP command - Optimize BGP EVPN L2VNI/L3VIN remote routes processing
- Respect non-transitive BGP extended communities between direct peers
- Drop deprecated
bgp network import-check exact
command - Handle BGP ENHE (Extended Next Hop Encoding) capability via dynamic capability
- Implement BGP connect backoff retry
- Implement an ability to import BMP information from a separate BGP instance
- Add support of BGP color extended community color-only types
- Implement SBFD
- Add support for SRv6 static SIDs
- Implement embedded-rp for PIMv6
- Implement AutoRP mapping-agent for PIM
- Implement MSDP peer SA limiting
What's Changed
- zebra: Fix crash in pw code by @donaldsharp in #17042
- bfdd, yang: change bfd timer and multiplier values by @louis-6wind in #17002
- Adds note about VRRP issues inside a VM with underlying bridge networking by @chriswiggins in #17050
- tools: Add missing mgmtd into logrotate/rsyslogd by @ton31337 in #17054
- isisd: Lsp fragments will delete the corresponding dyn_cache entry. by @baozhen-H3C in #17044
- bgpd: Allow specification of vrf in show bgp neighbor graceful-restart by @donaldsharp in #17057
- bgpd: changes for code maintainability by @sri-mohan1 in #17040
- 10.3 dev deb/rpm housekeeping by @Jafaral in #17061
- bgpd: fix ipv6 nexthop-local unchanged by @louis-6wind in #17037
- doc: routemap: fix typos by @rudis in #17064
- bgpd: Move some non BGP-specific route-map functions to lib by @ton31337 in #17059
- bgpd: split nexthop-local unchanged peer subgroup by @louis-6wind in #17071
- zebra: add back one field for debug by @anlancs in #17082
- zebra: Only notify dplane work pthread when needed by @donaldsharp in #17062
- bgpd: fix evpn mh esi down by @chiragshah6 in #17074
- doc: clarify bgp as-override by @louis-6wind in #17087
- bgpd: bmp loc-rib peer up/down for vrfs by @louis-6wind in #17001
- zebra: vlan to dplane by @raja-rajasekar in #16737
- bgpd: Remove unused BGP_NEXTHOP_CONNECTED_CHANGED flag for nexthop by @ton31337 in #17099
- bgpd: Check if su_local/su_remote exist before encoding BMP peer state by @ton31337 in #17103
- bgpd: fix route selection with AIGP by @enkechen-panw in #17093
- bgpd: Drop deprecated
bgp network import-check exact
command by @ton31337 in #17053 - lib: Apply and generate route-map commands earlier before any other protocol by @ton31337 in #17058
- isisd: Remove circuit state check for openfabric by @ton31337 in #17083
- ospfd: fix the bug that the empty area was not free after no_area_range was executed by @Shbinging in #17101
- bgpd: fix bmp coverity issue 1600779 by @louis-6wind in #17106
- tools/gcc-plugins: don't crash on array parameters by @eqvinox in #17104
- bgpd, tests: don't send local nexthop from rr client by @louis-6wind in #17073
- zebra: Prevent a kernel route from being there when a connected should by @donaldsharp in #17088
- zebra: Attempt to explain the rnh tracking code better by @donaldsharp in #15586
- bgpd: Derive and set MED from IGP or AIGP by @ton31337 in #17038
- tests: iproute2_check_path_selection call the actual command by @donaldsharp in #17107
- ospfd: Fixup ospf_lsa.[ch] to properly spell out parameters for funct… by @donaldsharp in #17126
- zebra: unlock node only after operation in zebra_free_rnh() by @enkechen-panw in #17116
- vtysh: fix SA warning, no need to call getenv() twice by @Jafaral in #17114
- bgpd: Implement match src-peer ... command by @ton31337 in #16946
- zebra: fix heap-use-after free on ns shutdown by @pguibert6WIND in #17020
- *: Fix up improper handling of nexthops for nexthop tracking by @donaldsharp in #17076
- lib, test: fix display ipv4 mapped ipv6 addresses by @louis-6wind in #16452
- bgpd: fix several issues in sourcing AIGP attribute by @enkechen-panw in #17091
- ospfd: fix some ospf commands by @Shbinging in #17065
- *: fix clang-19 SA by @eqvinox in #17136
- zebra: Fix possible null deref discovered by coverity by @donaldsharp in #17154
- ospfd: update ospf_asbr_status when using no_area_nssa command by @Shbinging in #17134
- lib: Correctly handle ppoll pfds.events == 0 by @donaldsharp in #17025
- bgpd: changes for code maintainability by @sri-mohan1 in #17164
- bgpd: changes for code maintainability by @sri-mohan1 in #17167
- tests: logger masked in topotest.py by @liambrady in #17157
- bgpd: allow value 0 in aigp-metric setting by @enkechen-panw in #17169
- doc: Require unified config for all new topotests by @ton31337 in #17172
- bgpd: fix AIGP calculation in route advertisement by @enkechen-panw in #17168
- bgpd: Handle non-transitive extended communities by @ton31337 in #17151
- bgpd: Do not filter no-export community for BGP OAD by @ton31337 in #17165
- zebra: remove useless code by @anlancs in #17166
- isisd: fix 'show isis route' and 'show isis fast-reroute summary' errors with vrf by @baozhen-H3C in #17174
- zebra: drop NEWLINK event handling in the main thread by @anlancs in #17180
- bgpd: Do not leak a stream with bmp code by @donaldsharp in #17192
- Revert "lib: Attach stdout to child only if --log=stdout and stdout F… by @donaldsharp in #17198
- ospfd:fix the bug that the empty area was not free after no area range command was executed by @Shbinging in #17183
- zebra: fix showing nexthop vrf for ipv6 blackhole by @louis-6wind in #17162
- bgpd: fix uninitialized bgp_labels by @louis-6wind in #17191
- lib:
debug memstats-at-exit
improvements by @eqvinox in #17155 - pimd: PIM autorp no path RP fix by @nabahr in #17215
- Optimizations and problem fixing for large scale ecmp from bgp by @donaldsharp in #17229
- tests: add bmpserver logging by @louis-6wind in #17207
- bgpd: compare aigp after local route check in bgp_path_info_cmp() by @enkechen-panw in #17199
- docs: Update evpn.rst by @systemcrash in #17255
- pimd, tests: fix bsr assert and expand topotest to pimv6 by @Jafaral in #17216
- lib, zebra: Keep
zebra on-rib-process script
in frr.conf by @ton31337 in #17160 - isisd: fix change flex-algorithm number from uint32 to uint8 by @pguibert6WIND in #17250
- bgpd: add bgp ipv6-auto-ra command by @Sokolmish in #16354
- bgpd: fix display of local label in show bgp by @louis-6wind in #17243
- vtysh: fix
find
andlist
commands by @eqvinox in #17200 - Mrib nht wonky by @donaldsharp in #17254
- zebra: add 'debug zebra srv6' command by @pguibert6WIND in #17257
- ospfd:fix syntax of some ospf no commands by @Shbinging in #17189
- bgpd: fix blank line in running-config with bmp listener cmd by @pguibert6WIND in #17278
- bgpd: fix crash when...
FRR Release 10.2.2
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Bug Fixes
bgpd
- Allow bfd to work if peer known but interface address not yet
- Apply route-map for aggregate before attribute comparison
- Do not ignore auto generated vrf instances when deleting
- Do not start bgp session if bgp identifier is not set
- Do not try to uninstall bfd session if the peer is not established
- Don't reuse nexthop variable in loop/switch
- Fix a bug in peer_allowas_in_set()
- Fix add label support to evpn ad routes
- Fix bfd with update-source in peer-group
- Fix bgp label evpn cid 1636504
- Fix bgp orf prefix-list json prefix
- Fix bgp peer solo option
- Fix bgp vrf instance creation from implicit
- Fix crash in bgp_labelpool
- Fix crash in displaying json orf prefix-list
- Fix deadlock in bgp_keepalive and master pthreads
- Fix duplicate bgp instance created with unified config
- Fix for local interface mac cache issue in 'bgp mac hash' table
- Fix import vrf creates multiple bgp instances
- Fix incorrect json in bgp_show_table_rd
- Fix memory leak in bgp_aggregate_install()
- Fix route-distinguisher in vrf leak json cmd
- Fix static analyzer issues around bgp pointer
- Fix table-map option
- Fix vty output of evpn route-target as4
- Fix wrong pthread event cancelling
- Remove dmed check not required in bestpath selection
- Request srv6 locator after zebra connection
- Reset bgp session only if it was a real bfd down event
- Respect allowas-in value from the source vrf's peer
- Simplify bgp_evpn_process_rt1 with label
- Update source address for bfd session
- Use igpmetric in bgp_aigp_metric_total()
- When bgp notices a change to shared_network inform bfd of it
- When removing the prefix list drop the pointer
- With suppress-fib-pending ensure withdrawal is sent
- Revert: Handle addpath capability using dynamic capabilities"
- Revert: Reinstall aggregated routes if using route-maps and it was changed"
isisd
- Add helper function to request srv6 locator information
- Allow full
no
form fordomain-password
andarea-password
- Correct edge insertion into ted
- Request srv6 locator after zebra connection
- Show correct level information for
show isis interface detail json
lib
- Clean up nexthop hashing mess
- Crash handlers must be allowed on threads
- Fix false context information for srv6 route
- Guard against padding garbage in zapi read
- Nb: call child destroy cbs when yang container is deleted
mgmtd
- Prevent use after free
nhrpd
- Fix dont consider incomplete l2 entry
ospf6d
- Fix use after free of router in ospfv3 abr route calculation.
pbrd
- Initialize structs used in hash_lookup
pimd
- Always write cand-rp group config even when rp is inactive
- Close autorp socket when not needed
- During prefix-list update, behave as pim_upstream_notjoined state (conformance issue)
- Explicitly ensure the rp src is bsr
- Fix autorp group joins
- Fix bsr rps timing out
- Fix dr election race on startup
- Fix for data packet loss when fhr is lhr and rp
- Fix for fhr mroute taking longer to age out
- Fix memory leak and assign allocation type
- Fix pim vrf support (send register/register stop in vrf)
- Fix pim6 mld vrf support (use recvmsg() pktinfo)
- Fix vrf binding of autorp and mroute socket
tests
- Add a test that shows the v6 recursive nexthop problem
- Bgp_srv6_sid_reachability should give more time
- Bgp_srv6l3vpn_to_bgp_vrf3 needs more time
- Check if allow as-in works when importing between local vrfs
tools
- Add missing formats keyword to segment-routing in frr-reload
- Add missing rpki keyword to vrf in frr-reload
- Fix frr-reload for ebgp-multihop ttl reconfiguration.
zebra
- Ensure dplane does not send work back to master at wrong time
- Evpn svd hash avoid double free
- Fix leaked nhe
- Fix resetting valid flags for nhg dependents
- Guard against junk in nexthop->rmap_src
- Include resolving nexthops in nhg hash
FRR release 8.4.7
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Bug Fixes
bgpd
- Add
bgp ipv6-auto-ra
command - Include structure when removing End.DT4/6 SID
- Include structure when installing End.DT4/6 SID
lib
- Include SID structure in seg6local nexthop
ospfd
- Fix heap corruption vulnerability when parsing SR-Algorithm TLV
zebra
- Fix crash during reconnect
- Add missing proto translations
- Correctly report metrics
- Let's use memset instead of walking bytes and setting to 0
- Fix snmp walk of zebra rib
FRR release 9.1.3
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Bug Fixes
bfdd
- Add no variants to interval configurations
bgpd
- Actually make
--v6-with-v4-nexthops
it work - Add
bgp ipv6-auto-ra
command - Allow value 0 in aigp-metric setting
- Clear all paths including addpath once GR expires
- Compare aigp after local route check in bgp_path_info_cmp()
- EVPN fix per rd specific type-2 json output
- Fix addressing information of non established outgoing sessions
- Fix bgp core with a possible Intf delete
- Fix blank line in running-config with bmp listener cmd
- Fix crash when polling bgp4v2PathAttrTable
- Fix display of local label in show bgp
- Fix for match source-protocol in route-map for redistribute cmd
- Fix memory leak when creating BMP connection with a source interface
- Fix printfrr_bp for non initialized peers
- Fix route selection with AIGP
- Fix several issues in sourcing AIGP attribute
- Fix unconfigure asdot neighbor
- Include structure when installing End.DT4/6 SID
- Include structure when installing End.DT46 SID
- Include structure when removing End.DT4/6 SID
- Include structure when removing End.DT46 SID
- Move some non BGP-specific route-map functions to lib
- Remove useless control checks about TCP connection
- Set LLGR stale routes for all the paths including addpath
- Treat numbered community-list only if it's in a range 1-500
- Validate both nexthop information (NEXTHOP and NLRI)
isisd
- Fix rcap tlv double-free crash
lib
- Include SID structure in seg6local nexthop
- Take ge/le into consideration when checking the prefix with the prefix-list
- Keep
zebra on-rib-process script
in frr.conf
nhrpd
- Fixes duplicate auth extension
ospfd
- Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
pimd
- Allow resolving bsr via directly connected secondary address
- Fix access-list memory leak in pimd
vrrpd
- Iterate over all ancillary messages
zebra
- Add missing new line for help string
- Add missing proto translations
- Correctly report metrics
- Fix crash during reconnect
- Fix snmp walk of zebra rib
- Let's use memset instead of walking bytes and setting to 0
- Separate zebra ZAPI server open and accept
- Unlock node only after operation in zebra_free_rnh()
FRR release 9.0.5
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Bug Fixes
bgpd
- Allow value 0 in aigp-metric setting
- Clear all paths including addpath once GR expires
- Compare aigp after local route check in bgp_path_info_cmp()
- EVPN fix per rd specific type-2 json output
- Fix bgp core with a possible Intf delete
- Fix blank line in running-config with bmp listener cmd
- Fix crash when polling bgp4v2PathAttrTable
- Fix display of local label in show bgp
- Fix for match source-protocol in route-map for redistribute cmd
- Fix memory leak when creating BMP connection with a source interface
- Fix route selection with AIGP
- Fix unconfigure asdot neighbor
- Include structure when installing End.DT4/6 SID
- Include structure when installing End.DT46 SID
- Include structure when removing End.DT4/6 SID
- Include structure when removing End.DT46 SID
- Move some non BGP-specific route-map functions to lib
- Set LLGR stale routes for all the paths including addpath
- Treat numbered community-list only if it's in a range 1-500
- Validate both nexthop information (NEXTHOP and NLRI)
lib
- Include SID structure in seg6local nexthop
- Take ge/le into consideration when checking the prefix with the prefix-list
nhrpd
- Fixes duplicate auth extension
ospfd
- Fix heap corruption vulnerability when parsing SR-Algorithm TLV
- Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
pimd
- Allow resolving bsr via directly connected secondary address
- Fix access-list memory leak in pimd
vrrpd
- Iterate over all ancillary messages
zebra
- Add missing proto translations
- Correctly report metrics
- Fix crash during reconnect
- Fix snmp walk of zebra rib
- Let's use memset instead of walking bytes and setting to 0
- Separate zebra ZAPI server open and accept
- Unlock node only after operation in zebra_free_rnh()
FRR release 8.5.7
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Bug Fixes
bgpd
- Fix memory leak when creating BMP connection with a source interface
- Include structure when installing End.DT4/6 SID
- Include structure when installing End.DT46 SID
- Include structure when removing End.DT4/6 SID
- Include structure when removing End.DT46 SID
lib
- Include SID structure in seg6local nexthop
- Take ge/le into consideration when checking the prefix with the prefix-list
ospfd
- Fix heap corruption vulnerability when parsing SR-Algorithm TLV
pimd
- Fix access-list memory leak in pimd
zebra
- Add missing proto translations
- Correctly report metrics
- Fix crash during reconnect
- Fix snmp walk of zebra rib
- Let's use memset instead of walking bytes and setting to 0
FRR release 10.2.1
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-55553
More details: https://frrouting.org/security/cve-2024-55553
Bug Fixes
bfdd
- retain remote dplane client socket
bgpd
- Fix to pop items off zebra_announce FIFO for few EVPN triggers
- Check if as_type is not specified when peer is a peer-group member
- Do not reset peers on suppress-fib toggling
- Fix bgp core with a possible Intf delete
- Fix
enforce-first-as
per peer-group removal - Fix evpn bestpath calculation when path is not established
- Fix graceful-restart for peer-groups
- Fix memory leak when creating BMP connection with a source interface
- Fix memory leak when reconfiguring a route distinguisher
- Fix unconfigure asdot neighbor
- Fix use single whitespace when displaying flowspec entries
- Fix version attribute is an int, not a string
- Import allowed routes with self AS if desired
- Initialize as_type for peer-group as AS_UNSPECIFIED
- Use gracefulRestart JSON field
- Validate both nexthop information (NEXTHOP and NLRI)
- Validate only affected RPKI prefixes instead of a full RIB
- When calling bgp_process, prevent infinite loop
lib
- Allow setsockopt functions to return size set
- Fix session re-establishment
- Take ge/le into consideration when checking the prefix with the prefix-list
- Use backoff setsockopt option for freebsd
ospfd
- OSPF multi-instance default origination fixes
pimd
- Fix access-list memory leak in pimd
- Free igmp proxy joins on interface deletion
- igmp proxy joins should not be written as part of config
- Prevent crash of pim when auto-rp's socket is not initialized
FRR release 10.1.2
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-55553
More details: https://frrouting.org/security/cve-2024-55553
Bug Fixes
babeld
- Do not remove route when replacing
- Send the route's metric down to zebra.
bfdd
- Add no variants to interval configurations
- Retain remote dplane client socket
bgpd
- Actually make
--v6-with-v4-nexthops
it work - Add
bgp ipv6-auto-ra
command - Allow value 0 in aigp-metric setting
- Avoid use-after-free when doing
no router bgp
with auto created instances - Fix to pop items off zebra_announce FIFO for few EVPN triggers
- Clear all paths including addpath once GR expires
- Compare aigp after local route check in bgp_path_info_cmp()
- Do not filter no-export community for BGP OAD (one administration domain)
- Do not reset peers on suppress-fib toggling
- EVPN fix per rd specific type-2 json output
- Fix bgp core with a possible Intf delete
- Fix blank line in running-config with bmp listener cmd
- Fix crash when polling bgp4v2PathAttrTable
- Fix display of local label in show bgp
- Fix
enforce-first-as
per peer-group removal - Fix evpn bestpath calculation when path is not established
- Fix evpn mh esi flap remove local routes
- Fix for match source-protocol in route-map for redistribute cmd
- Fix memory leak when creating BMP connection with a source interface
- Fix memory leak when reconfiguring a route distinguisher
- Fix printfrr_bp for non initialized peers
- Fix resolvedPrefix in show nexthop json output
- Fix route selection with AIGP
- Fix several issues in sourcing AIGP attribute
- Fix unconfigure asdot neighbor
- Fix use single whitespace when displaying flowspec entries
- Fix version attribute is an int, not a string
- Include structure when installing End.DT4/6 SID
- Include structure when installing End.DT46 SID
- Include structure when removing End.DT4/6 SID
- Include structure when removing End.DT46 SID
- Move some non BGP-specific route-map functions to lib
- Set LLGR stale routes for all the paths including addpath
- Treat numbered community-list only if it's in a range 1-500
- Validate both nexthop information (NEXTHOP and NLRI)
- Validate only affected RPKI prefixes instead of a full RIB
isisd
- Fix change flex-algorithm number from uint32 to uint8
- Fix memory leaks when the transition of neighbor state from non-UP to DOWN
- Fix rcap tlv double-free crash
- Fix wrong check for MT commands
lib
- Attach stdout to child only if --log=stdout and stdout FD is a tty
- Include SID structure in seg6local nexthop
- Take ge/le into consideration when checking the prefix with the prefix-list
- Keep
zebra on-rib-process script
in frr.conf
nhrpd
- Fixes duplicate auth extension
ospfd
- Add a hidden command for old
no router-id
- Fix heap corruption vulnerability when parsing SR-Algorithm TLV
- Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
- Interface 'ip ospf neighbor-filter' startup config not applied.
- Use router_id what Zebra has if we remove a static router_id
pimd
- Allow resolving bsr via directly connected secondary address
- Fix access-list memory leak in pimd
vrrpd
- Iterate over all ancillary messages
zebra
- Add missing new line for help string
- Add missing proto translations
- Correctly report metrics
- Fix crash during reconnect
- Fix heap-use-after free on ns shutdown
- Fix snmp walk of zebra rib
- Let's use memset instead of walking bytes and setting to 0
- Separate zebra ZAPI server open and accept
- Unlock node only after operation in zebra_free_rnh()
FRR release 10.0.3
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-55553
More details: https://frrouting.org/security/cve-2024-55553
Bug Fixes
babeld
- Do not remove route when replacing
- Send the route's metric down to zebra.
bfdd
- Add no variants to interval configurations
bgpd
- Actually make
--v6-with-v4-nexthops
it work - Add
bgp ipv6-auto-ra
command - Allow value 0 in aigp-metric setting
- Clear all paths including addpath once GR expires
- Compare aigp after local route check in bgp_path_info_cmp()
- Do not filter no-export community for BGP OAD (one administration domain)
- Do not reset peers on suppress-fib toggling
- EVPN fix per rd specific type-2 json output
- Fix addressing information of non established outgoing sessions
- Fix bgp core with a possible Intf delete
- Fix blank line in running-config with bmp listener cmd
- Fix crash when polling bgp4v2PathAttrTable
- Fix display of local label in show bgp
- Fix
enforce-first-as
per peer-group removal - Fix for match source-protocol in route-map for redistribute cmd
- Fix memory leak when creating BMP connection with a source interface
- Fix memory leak when reconfiguring a route distinguisher
- Fix printfrr_bp for non initialized peers
- Fix route selection with AIGP
- Fix several issues in sourcing AIGP attribute
- Fix unconfigure asdot neighbor
- Fix uninitialized labels
- Fix use single whitespace when displaying flowspec entries
- Fix version attribute is an int, not a string
- Include structure when installing End.DT4/6 SID
- Include structure when installing End.DT46 SID
- Include structure when removing End.DT4/6 SID
- Include structure when removing End.DT46 SID
- Move some non BGP-specific route-map functions to lib
- Remove useless control checks about TCP connection
- Set LLGR stale routes for all the paths including addpath
- Treat numbered community-list only if it's in a range 1-500
- Validate both nexthop information (NEXTHOP and NLRI)
- Validate only affected RPKI prefixes instead of a full RIB
isisd
-Fix change flex-algorithm number from uint32 to uint8
- Fix rcap tlv double-free crash
- Fix wrong check for MT commands
lib
- Attach stdout to child only if --log=stdout and stdout FD is a tty
- Include SID structure in seg6local nexthop
- Take ge/le into consideration when checking the prefix with the prefix-list
- Keep
zebra on-rib-process script
in frr.conf
nhrpd
- Fixes duplicate auth extension
- Fix show nhrp shortcut json
ospfd
- Add a hidden command for old
no router-id
- Fix heap corruption vulnerability when parsing SR-Algorithm TLV
- Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
- Use router_id what Zebra has if we remove a static router_id
pimd
- Allow resolving bsr via directly connected secondary address
- Fix access-list memory leak in pimd
vrrpd
- Iterate over all ancillary messages
zebra
- Add missing new line for help string
- Add missing proto translations
- Correctly report metrics
- Fix crash during reconnect
- Fix heap-use-after free on ns shutdown
- Fix snmp walk of zebra rib
- Let's use memset instead of walking bytes and setting to 0
- Separate zebra ZAPI server open and accept
- Unlock node only after operation in zebra_free_rnh()