Skip to content

Releases: FRRouting/frr

FRR Release 10.1.3

21 Mar 03:07
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Allow bfd to work if peer known but interface address not yet
  • Apply route-map for aggregate before attribute comparison
  • Do not start bgp session if bgp identifier is not set
  • Don't reuse nexthop variable in loop/switch
  • Fix a bug in peer_allowas_in_set()
  • Fix add label support to evpn ad routes
  • Fix bfd with update-source in peer-group
  • Fix bgp orf prefix-list json prefix
  • Fix crash in bgp_labelpool
  • Fix crash in displaying json orf prefix-list
  • Fix crash upon bgp network import-check command
  • Fix deadlock in bgp_keepalive and master pthreads
  • Fix for local interface mac cache issue in 'bgp mac hash' table
  • Fix incorrect json in bgp_show_table_rd
  • Fix memory leak in bgp_aggregate_install()
  • Fix route-distinguisher in vrf leak json cmd
  • Fix vty output of evpn route-target as4
  • Fix wrong pthread event cancelling
  • Remove dmed check not required in bestpath selection
  • Reset bgp session only if it was a real bfd down event
  • Update source address for bfd session
  • Use igpmetric in bgp_aigp_metric_total()
  • When bgp notices a change to shared_network inform bfd of it
  • When removing the prefix list drop the pointer
  • With suppress-fib-pending ensure withdrawal is sent
  • Revert: Handle addpath capability using dynamic capabilities
  • Revert: Reinstall aggregated routes if using route-maps and it was changed

fpm

  • Guard against garbage in unused address bytes

isisd

  • Allow full no form for domain-password and area-password
  • Correct edge insertion into ted
  • Show correct level information for show isis interface detail json

lib

  • Crash handlers must be allowed on threads
  • Fix false context information for srv6 route
  • Guard against padding garbage in zapi read

mgmtd

  • Prevent use after free

nhrpd

  • Fix do not consider incomplete l2 entry

pbrd

  • Initialize structs used in hash_lookup

pimd

  • During prefix-list update, behave as pim_upstream_notjoined state (conformance issue)
  • Fix dr election race on startup
  • Fix for data packet loss when fhr is lhr and rp
  • Fix for fhr mroute taking longer to age out
  • Fix pim vrf support (send register/register stop in vrf)
  • Fix pim6 mld vrf support (use recvmsg() pktinfo)

tools

  • Add missing rpki keyword to vrf in frr-reload
  • Fix frr-reload for ebgp-multihop ttl reconfiguration.

zebra

  • Evpn svd hash avoid double free
  • Fix resetting valid flags for nhg dependents
  • Guard against junk in nexthop->rmap_src
  • Include resolving nexthops in nhg hash

FRR Release 10.3

21 Mar 03:09
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr

Release Overview

New Features Highlight:

  • Lua 5.4 support
  • Fixed CVE-2024-55553
  • New match community-count BGP command to limit communities count
  • New set metric igp|aigp BGP command to inject IGP metric as MED into BGP
  • New bgp ipv6-auto-ra BGP command
  • Optimize BGP EVPN L2VNI/L3VIN remote routes processing
  • Respect non-transitive BGP extended communities between direct peers
  • Drop deprecated bgp network import-check exact command
  • Handle BGP ENHE (Extended Next Hop Encoding) capability via dynamic capability
  • Implement BGP connect backoff retry
  • Implement an ability to import BMP information from a separate BGP instance
  • Add support of BGP color extended community color-only types
  • Implement SBFD
  • Add support for SRv6 static SIDs
  • Implement embedded-rp for PIMv6
  • Implement AutoRP mapping-agent for PIM
  • Implement MSDP peer SA limiting

What's Changed

Read more

FRR Release 10.2.2

21 Mar 03:08
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Allow bfd to work if peer known but interface address not yet
  • Apply route-map for aggregate before attribute comparison
  • Do not ignore auto generated vrf instances when deleting
  • Do not start bgp session if bgp identifier is not set
  • Do not try to uninstall bfd session if the peer is not established
  • Don't reuse nexthop variable in loop/switch
  • Fix a bug in peer_allowas_in_set()
  • Fix add label support to evpn ad routes
  • Fix bfd with update-source in peer-group
  • Fix bgp label evpn cid 1636504
  • Fix bgp orf prefix-list json prefix
  • Fix bgp peer solo option
  • Fix bgp vrf instance creation from implicit
  • Fix crash in bgp_labelpool
  • Fix crash in displaying json orf prefix-list
  • Fix deadlock in bgp_keepalive and master pthreads
  • Fix duplicate bgp instance created with unified config
  • Fix for local interface mac cache issue in 'bgp mac hash' table
  • Fix import vrf creates multiple bgp instances
  • Fix incorrect json in bgp_show_table_rd
  • Fix memory leak in bgp_aggregate_install()
  • Fix route-distinguisher in vrf leak json cmd
  • Fix static analyzer issues around bgp pointer
  • Fix table-map option
  • Fix vty output of evpn route-target as4
  • Fix wrong pthread event cancelling
  • Remove dmed check not required in bestpath selection
  • Request srv6 locator after zebra connection
  • Reset bgp session only if it was a real bfd down event
  • Respect allowas-in value from the source vrf's peer
  • Simplify bgp_evpn_process_rt1 with label
  • Update source address for bfd session
  • Use igpmetric in bgp_aigp_metric_total()
  • When bgp notices a change to shared_network inform bfd of it
  • When removing the prefix list drop the pointer
  • With suppress-fib-pending ensure withdrawal is sent
  • Revert: Handle addpath capability using dynamic capabilities"
  • Revert: Reinstall aggregated routes if using route-maps and it was changed"

isisd

  • Add helper function to request srv6 locator information
  • Allow full no form for domain-password and area-password
  • Correct edge insertion into ted
  • Request srv6 locator after zebra connection
  • Show correct level information for show isis interface detail json

lib

  • Clean up nexthop hashing mess
  • Crash handlers must be allowed on threads
  • Fix false context information for srv6 route
  • Guard against padding garbage in zapi read
  • Nb: call child destroy cbs when yang container is deleted

mgmtd

  • Prevent use after free

nhrpd

  • Fix dont consider incomplete l2 entry

ospf6d

  • Fix use after free of router in ospfv3 abr route calculation.

pbrd

  • Initialize structs used in hash_lookup

pimd

  • Always write cand-rp group config even when rp is inactive
  • Close autorp socket when not needed
  • During prefix-list update, behave as pim_upstream_notjoined state (conformance issue)
  • Explicitly ensure the rp src is bsr
  • Fix autorp group joins
  • Fix bsr rps timing out
  • Fix dr election race on startup
  • Fix for data packet loss when fhr is lhr and rp
  • Fix for fhr mroute taking longer to age out
  • Fix memory leak and assign allocation type
  • Fix pim vrf support (send register/register stop in vrf)
  • Fix pim6 mld vrf support (use recvmsg() pktinfo)
  • Fix vrf binding of autorp and mroute socket

tests

  • Add a test that shows the v6 recursive nexthop problem
  • Bgp_srv6_sid_reachability should give more time
  • Bgp_srv6l3vpn_to_bgp_vrf3 needs more time
  • Check if allow as-in works when importing between local vrfs

tools

  • Add missing formats keyword to segment-routing in frr-reload
  • Add missing rpki keyword to vrf in frr-reload
  • Fix frr-reload for ebgp-multihop ttl reconfiguration.

zebra

  • Ensure dplane does not send work back to master at wrong time
  • Evpn svd hash avoid double free
  • Fix leaked nhe
  • Fix resetting valid flags for nhg dependents
  • Guard against junk in nexthop->rmap_src
  • Include resolving nexthops in nhg hash

FRR release 8.4.7

06 Jan 16:24
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Add bgp ipv6-auto-ra command
  • Include structure when removing End.DT4/6 SID
  • Include structure when installing End.DT4/6 SID

lib

  • Include SID structure in seg6local nexthop

ospfd

  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV

zebra

  • Fix crash during reconnect
  • Add missing proto translations
  • Correctly report metrics
  • Let's use memset instead of walking bytes and setting to 0
  • Fix snmp walk of zebra rib

FRR release 9.1.3

06 Jan 16:24
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bfdd

  • Add no variants to interval configurations

bgpd

  • Actually make --v6-with-v4-nexthops it work
  • Add bgp ipv6-auto-ra command
  • Allow value 0 in aigp-metric setting
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • EVPN fix per rd specific type-2 json output
  • Fix addressing information of non established outgoing sessions
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix printfrr_bp for non initialized peers
  • Fix route selection with AIGP
  • Fix several issues in sourcing AIGP attribute
  • Fix unconfigure asdot neighbor
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Remove useless control checks about TCP connection
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)

isisd

  • Fix rcap tlv double-free crash

lib

  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Keep zebra on-rib-process script in frr.conf

nhrpd

  • Fixes duplicate auth extension

ospfd

  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing new line for help string
  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()

FRR release 9.0.5

06 Jan 16:24
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Allow value 0 in aigp-metric setting
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • EVPN fix per rd specific type-2 json output
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix route selection with AIGP
  • Fix unconfigure asdot neighbor
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)

lib

  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list

nhrpd

  • Fixes duplicate auth extension

ospfd

  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV
  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()

FRR release 8.5.7

06 Jan 16:25
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Fix memory leak when creating BMP connection with a source interface
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID

lib

  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list

ospfd

  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV

pimd

  • Fix access-list memory leak in pimd

zebra

  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0

FRR release 10.2.1

06 Jan 16:25
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-55553

More details: https://frrouting.org/security/cve-2024-55553

Bug Fixes

bfdd

  • retain remote dplane client socket

bgpd

  • Fix to pop items off zebra_announce FIFO for few EVPN triggers
  • Check if as_type is not specified when peer is a peer-group member
  • Do not reset peers on suppress-fib toggling
  • Fix bgp core with a possible Intf delete
  • Fix enforce-first-as per peer-group removal
  • Fix evpn bestpath calculation when path is not established
  • Fix graceful-restart for peer-groups
  • Fix memory leak when creating BMP connection with a source interface
  • Fix memory leak when reconfiguring a route distinguisher
  • Fix unconfigure asdot neighbor
  • Fix use single whitespace when displaying flowspec entries
  • Fix version attribute is an int, not a string
  • Import allowed routes with self AS if desired
  • Initialize as_type for peer-group as AS_UNSPECIFIED
  • Use gracefulRestart JSON field
  • Validate both nexthop information (NEXTHOP and NLRI)
  • Validate only affected RPKI prefixes instead of a full RIB
  • When calling bgp_process, prevent infinite loop

lib

  • Allow setsockopt functions to return size set
  • Fix session re-establishment
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Use backoff setsockopt option for freebsd

ospfd

  • OSPF multi-instance default origination fixes

pimd

  • Fix access-list memory leak in pimd
  • Free igmp proxy joins on interface deletion
  • igmp proxy joins should not be written as part of config
  • Prevent crash of pim when auto-rp's socket is not initialized

FRR release 10.1.2

06 Jan 16:26
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-55553

More details: https://frrouting.org/security/cve-2024-55553

Bug Fixes

babeld

  • Do not remove route when replacing
  • Send the route's metric down to zebra.

bfdd

  • Add no variants to interval configurations
  • Retain remote dplane client socket

bgpd

  • Actually make --v6-with-v4-nexthops it work
  • Add bgp ipv6-auto-ra command
  • Allow value 0 in aigp-metric setting
  • Avoid use-after-free when doing no router bgp with auto created instances
  • Fix to pop items off zebra_announce FIFO for few EVPN triggers
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • Do not filter no-export community for BGP OAD (one administration domain)
  • Do not reset peers on suppress-fib toggling
  • EVPN fix per rd specific type-2 json output
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix enforce-first-as per peer-group removal
  • Fix evpn bestpath calculation when path is not established
  • Fix evpn mh esi flap remove local routes
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix memory leak when reconfiguring a route distinguisher
  • Fix printfrr_bp for non initialized peers
  • Fix resolvedPrefix in show nexthop json output
  • Fix route selection with AIGP
  • Fix several issues in sourcing AIGP attribute
  • Fix unconfigure asdot neighbor
  • Fix use single whitespace when displaying flowspec entries
  • Fix version attribute is an int, not a string
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)
  • Validate only affected RPKI prefixes instead of a full RIB

isisd

  • Fix change flex-algorithm number from uint32 to uint8
  • Fix memory leaks when the transition of neighbor state from non-UP to DOWN
  • Fix rcap tlv double-free crash
  • Fix wrong check for MT commands

lib

  • Attach stdout to child only if --log=stdout and stdout FD is a tty
  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Keep zebra on-rib-process script in frr.conf

nhrpd

  • Fixes duplicate auth extension

ospfd

  • Add a hidden command for old no router-id
  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV
  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
  • Interface 'ip ospf neighbor-filter' startup config not applied.
  • Use router_id what Zebra has if we remove a static router_id

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing new line for help string
  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix heap-use-after free on ns shutdown
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()

FRR release 10.0.3

06 Jan 16:26
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-55553

More details: https://frrouting.org/security/cve-2024-55553

Bug Fixes

babeld

  • Do not remove route when replacing
  • Send the route's metric down to zebra.

bfdd

  • Add no variants to interval configurations

bgpd

  • Actually make --v6-with-v4-nexthops it work
  • Add bgp ipv6-auto-ra command
  • Allow value 0 in aigp-metric setting
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • Do not filter no-export community for BGP OAD (one administration domain)
  • Do not reset peers on suppress-fib toggling
  • EVPN fix per rd specific type-2 json output
  • Fix addressing information of non established outgoing sessions
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix enforce-first-as per peer-group removal
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix memory leak when reconfiguring a route distinguisher
  • Fix printfrr_bp for non initialized peers
  • Fix route selection with AIGP
  • Fix several issues in sourcing AIGP attribute
  • Fix unconfigure asdot neighbor
  • Fix uninitialized labels
  • Fix use single whitespace when displaying flowspec entries
  • Fix version attribute is an int, not a string
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Remove useless control checks about TCP connection
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)
  • Validate only affected RPKI prefixes instead of a full RIB

isisd
-Fix change flex-algorithm number from uint32 to uint8

  • Fix rcap tlv double-free crash
  • Fix wrong check for MT commands

lib

  • Attach stdout to child only if --log=stdout and stdout FD is a tty
  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Keep zebra on-rib-process script in frr.conf

nhrpd

  • Fixes duplicate auth extension
  • Fix show nhrp shortcut json

ospfd

  • Add a hidden command for old no router-id
  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV
  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
  • Use router_id what Zebra has if we remove a static router_id

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing new line for help string
  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix heap-use-after free on ns shutdown
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()