Skip to content

Releases: FRRouting/frr

FRR release 8.4.7

06 Jan 16:24
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Add bgp ipv6-auto-ra command
  • Include structure when removing End.DT4/6 SID
  • Include structure when installing End.DT4/6 SID

lib

  • Include SID structure in seg6local nexthop

ospfd

  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV

zebra

  • Fix crash during reconnect
  • Add missing proto translations
  • Correctly report metrics
  • Let's use memset instead of walking bytes and setting to 0
  • Fix snmp walk of zebra rib

FRR release 9.1.3

06 Jan 16:24
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bfdd

  • Add no variants to interval configurations

bgpd

  • Actually make --v6-with-v4-nexthops it work
  • Add bgp ipv6-auto-ra command
  • Allow value 0 in aigp-metric setting
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • EVPN fix per rd specific type-2 json output
  • Fix addressing information of non established outgoing sessions
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix printfrr_bp for non initialized peers
  • Fix route selection with AIGP
  • Fix several issues in sourcing AIGP attribute
  • Fix unconfigure asdot neighbor
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Remove useless control checks about TCP connection
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)

isisd

  • Fix rcap tlv double-free crash

lib

  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Keep zebra on-rib-process script in frr.conf

nhrpd

  • Fixes duplicate auth extension

ospfd

  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing new line for help string
  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()

FRR release 9.0.5

06 Jan 16:24
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Allow value 0 in aigp-metric setting
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • EVPN fix per rd specific type-2 json output
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix route selection with AIGP
  • Fix unconfigure asdot neighbor
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)

lib

  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list

nhrpd

  • Fixes duplicate auth extension

ospfd

  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV
  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()

FRR release 8.5.7

06 Jan 16:25
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Bug Fixes

bgpd

  • Fix memory leak when creating BMP connection with a source interface
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID

lib

  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list

ospfd

  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV

pimd

  • Fix access-list memory leak in pimd

zebra

  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0

FRR release 10.2.1

06 Jan 16:25
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-55553

More details: https://frrouting.org/security/cve-2024-55553

Bug Fixes

bfdd

  • retain remote dplane client socket

bgpd

  • Fix to pop items off zebra_announce FIFO for few EVPN triggers
  • Check if as_type is not specified when peer is a peer-group member
  • Do not reset peers on suppress-fib toggling
  • Fix bgp core with a possible Intf delete
  • Fix enforce-first-as per peer-group removal
  • Fix evpn bestpath calculation when path is not established
  • Fix graceful-restart for peer-groups
  • Fix memory leak when creating BMP connection with a source interface
  • Fix memory leak when reconfiguring a route distinguisher
  • Fix unconfigure asdot neighbor
  • Fix use single whitespace when displaying flowspec entries
  • Fix version attribute is an int, not a string
  • Import allowed routes with self AS if desired
  • Initialize as_type for peer-group as AS_UNSPECIFIED
  • Use gracefulRestart JSON field
  • Validate both nexthop information (NEXTHOP and NLRI)
  • Validate only affected RPKI prefixes instead of a full RIB
  • When calling bgp_process, prevent infinite loop

lib

  • Allow setsockopt functions to return size set
  • Fix session re-establishment
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Use backoff setsockopt option for freebsd

ospfd

  • OSPF multi-instance default origination fixes

pimd

  • Fix access-list memory leak in pimd
  • Free igmp proxy joins on interface deletion
  • igmp proxy joins should not be written as part of config
  • Prevent crash of pim when auto-rp's socket is not initialized

FRR release 10.1.2

06 Jan 16:26
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-55553

More details: https://frrouting.org/security/cve-2024-55553

Bug Fixes

babeld

  • Do not remove route when replacing
  • Send the route's metric down to zebra.

bfdd

  • Add no variants to interval configurations
  • Retain remote dplane client socket

bgpd

  • Actually make --v6-with-v4-nexthops it work
  • Add bgp ipv6-auto-ra command
  • Allow value 0 in aigp-metric setting
  • Avoid use-after-free when doing no router bgp with auto created instances
  • Fix to pop items off zebra_announce FIFO for few EVPN triggers
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • Do not filter no-export community for BGP OAD (one administration domain)
  • Do not reset peers on suppress-fib toggling
  • EVPN fix per rd specific type-2 json output
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix enforce-first-as per peer-group removal
  • Fix evpn bestpath calculation when path is not established
  • Fix evpn mh esi flap remove local routes
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix memory leak when reconfiguring a route distinguisher
  • Fix printfrr_bp for non initialized peers
  • Fix resolvedPrefix in show nexthop json output
  • Fix route selection with AIGP
  • Fix several issues in sourcing AIGP attribute
  • Fix unconfigure asdot neighbor
  • Fix use single whitespace when displaying flowspec entries
  • Fix version attribute is an int, not a string
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)
  • Validate only affected RPKI prefixes instead of a full RIB

isisd

  • Fix change flex-algorithm number from uint32 to uint8
  • Fix memory leaks when the transition of neighbor state from non-UP to DOWN
  • Fix rcap tlv double-free crash
  • Fix wrong check for MT commands

lib

  • Attach stdout to child only if --log=stdout and stdout FD is a tty
  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Keep zebra on-rib-process script in frr.conf

nhrpd

  • Fixes duplicate auth extension

ospfd

  • Add a hidden command for old no router-id
  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV
  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
  • Interface 'ip ospf neighbor-filter' startup config not applied.
  • Use router_id what Zebra has if we remove a static router_id

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing new line for help string
  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix heap-use-after free on ns shutdown
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()

FRR release 10.0.3

06 Jan 16:26
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-55553

More details: https://frrouting.org/security/cve-2024-55553

Bug Fixes

babeld

  • Do not remove route when replacing
  • Send the route's metric down to zebra.

bfdd

  • Add no variants to interval configurations

bgpd

  • Actually make --v6-with-v4-nexthops it work
  • Add bgp ipv6-auto-ra command
  • Allow value 0 in aigp-metric setting
  • Clear all paths including addpath once GR expires
  • Compare aigp after local route check in bgp_path_info_cmp()
  • Do not filter no-export community for BGP OAD (one administration domain)
  • Do not reset peers on suppress-fib toggling
  • EVPN fix per rd specific type-2 json output
  • Fix addressing information of non established outgoing sessions
  • Fix bgp core with a possible Intf delete
  • Fix blank line in running-config with bmp listener cmd
  • Fix crash when polling bgp4v2PathAttrTable
  • Fix display of local label in show bgp
  • Fix enforce-first-as per peer-group removal
  • Fix for match source-protocol in route-map for redistribute cmd
  • Fix memory leak when creating BMP connection with a source interface
  • Fix memory leak when reconfiguring a route distinguisher
  • Fix printfrr_bp for non initialized peers
  • Fix route selection with AIGP
  • Fix several issues in sourcing AIGP attribute
  • Fix unconfigure asdot neighbor
  • Fix uninitialized labels
  • Fix use single whitespace when displaying flowspec entries
  • Fix version attribute is an int, not a string
  • Include structure when installing End.DT4/6 SID
  • Include structure when installing End.DT46 SID
  • Include structure when removing End.DT4/6 SID
  • Include structure when removing End.DT46 SID
  • Move some non BGP-specific route-map functions to lib
  • Remove useless control checks about TCP connection
  • Set LLGR stale routes for all the paths including addpath
  • Treat numbered community-list only if it's in a range 1-500
  • Validate both nexthop information (NEXTHOP and NLRI)
  • Validate only affected RPKI prefixes instead of a full RIB

isisd
-Fix change flex-algorithm number from uint32 to uint8

  • Fix rcap tlv double-free crash
  • Fix wrong check for MT commands

lib

  • Attach stdout to child only if --log=stdout and stdout FD is a tty
  • Include SID structure in seg6local nexthop
  • Take ge/le into consideration when checking the prefix with the prefix-list
  • Keep zebra on-rib-process script in frr.conf

nhrpd

  • Fixes duplicate auth extension
  • Fix show nhrp shortcut json

ospfd

  • Add a hidden command for old no router-id
  • Fix heap corruption vulnerability when parsing SR-Algorithm TLV
  • Fix missing '[no]ip ospf graceful-restart hello-delay ' commands
  • Use router_id what Zebra has if we remove a static router_id

pimd

  • Allow resolving bsr via directly connected secondary address
  • Fix access-list memory leak in pimd

vrrpd

  • Iterate over all ancillary messages

zebra

  • Add missing new line for help string
  • Add missing proto translations
  • Correctly report metrics
  • Fix crash during reconnect
  • Fix heap-use-after free on ns shutdown
  • Fix snmp walk of zebra rib
  • Let's use memset instead of walking bytes and setting to 0
  • Separate zebra ZAPI server open and accept
  • Unlock node only after operation in zebra_free_rnh()

FRR Release 10.2

25 Nov 01:58
Compare
Choose a tag to compare

We are pleased to announce FRR release 10.2.

FRR 10.2 brings a long list of enhancements and fixes with 748 commits from 59 developers. Thanks to all contributors.

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Release Overview

Breaking changes

  • New "router pim" config node now contains all pim commands similar to other protocols. Existing global PIM commands are deprecated, and may be removed in the future. [#16269]

New Features Highlight:

  • PIM candidate BSR/RP [#16438]
  • Static IGMP join without an IGMP report [#16450]
  • PIM AutoRP discovery/announcements [#16634]
  • IGMP proxy [#16861]
  • SRv6 SID Manager [#15604]
  • Add bgp ipv6-auto-ra command [#16354]
  • Implement neighbor x remote-as auto for BGP [#16345]
  • Implement bgp dual-as for BGP [#16816]
  • Implement BGP-wide configuration for graceful restart [#16099]
  • Handle kernel routes appropriately (should fix recent NOPREFIXROUTE issue) [#16300]
  • Add cisco-authentication password support for NHRP [#16172]

What's Changed

Read more

FRR release 8.4.6

23 Sep 07:07
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-44070

More details: https://frrouting.org/security/cve-2024-44070

Bug Fixes

isisd

  • Fix update link params after circuit is up

bgpd

tools

  • Ignore errors for frr reload stuff

FRR Release 9.1.2

23 Sep 07:08
Compare
Choose a tag to compare

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr

Fixed CVE-2024-44070

More details: https://frrouting.org/security/cve-2024-44070

Bug Fixes

bgpd

  • Fix crash at no rpki
  • Fix, do not access peer->notify.data when it is null
  • Fix for CVE-2024-44070
  • Ignore RFC8212 for BGP Confederations
  • Check if we have really enough data before doing memcpy for software version
  • Set last reset reason to admin shutdown if it was manually

isisd

  • Fix crash when reading asla
  • Add missing exit statement
  • Fix update link params after circuit is up
  • Fix crash when calculating the neighbor spanning tree based on the fragmented LSP

zebra

  • Ensure non-equal id's are not same nhg's

pimd

  • Fix msdp setting of sa->rp
  • Fix crash on non-existent interface

ospfd

  • Fix internal ldp-sync state flags when feature is disabled

zebra

  • Fix missing static routes
  • Fix to avoid two Vrfs with same table ids
  • Fix evpn mh bond member proto reinstall

ldpd

  • Fix wrong gtsm count

ripd

  • Change the start value of sequence 1 to 0