Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Docker - quay.io/frrouting/frr
What's Changed
- Alpine Docker fix ups for 3.22 (backport #20004)
- docker: Add missing
pytestpackage for Alpine as dependency (backport #20369) - isisd: fix crash when changing isis type (backport #20171)
- zebra: Fix memory leak when SRv6 dynamic SID allocation fails (backport #20445)
- ospfd: fixed ospf nssa flush issue (backport #20428)
- zebra: EVPN check l3vni vxlan intf exist in rmac install (backport #20494)
- bgpd: Fix multipath decision when multipath is 1 (backport #20493)
- bgpd: reduce ibuf_work ring buffer size (backport #20554)
- zebra: fix crash on inactive VRF and import table (backport #20525)
- zebra: FRR restart leads to zebra mlag core (backport #20225)
- bgpd: Fix double-free crash in peer_delete() during doppelganger peer… (backport #20661)
- bgpd: fix md5 password unset on dynamic nbr (backport #20740)
- bgpd: validate incoming NOTIFICATION messages (backport #20796)
- bgpd: improve flowspec NLRI validation (backport #20814)
- zebra: EVPN fix access BD deref of mbr intf (backport #20791)
- bgpd: Fix test for OPEN message with remote-as auto (backport #20963)
- ospfd: harden TE/SR TLV iteration against malformed lengths (backport #21002)
- bgpd: fix off-by-one error in FlowSpec operator array bounds check (backport #21054)
- ospfd: fix sequence number check, avoid truncation ambiguity (backport #21096)
- ldpd: improve tlv validation in several places (backport #21118)
- isisd: fix edge condition in max_lsp_count computation (backport #21159)
- bgpd: Return 0 if AS4 capability is malformed (backport #21112)
- bgpd: Prevent heap use-after-free for tunnel encapsulation attribute (backport #21176)
- bgpd: improve packet parsing for EVPN and ENCAP/VNC (backport #21098)
- bgpd: fix NHT for explicit link-local BGP peers (backport #21188)
- nhrpd: harden against malformed packets (backport #21097)
- vrrrpd: improve error handling in several paths (backport #21251)
- ripngd: fix data handling in several places (backport #21257)
- ospf6d: improve/harden packet processing (backport #21277)
- bgpd: Do not allocate stream if route-refresh capability is not received (backport #21394)
- bgpd: Don't mark nexthop as changed if a set next-hop unchanged is applied (backport #21445)
- ospfd: add validation in several places before accessing message bodies (backport #21303)
- bgpd: fix neighbor IP comparison for IPv6 memcmp return values (backport #21559)
- eigrpd: fix byte order in Hello authentication decode (backport #21545)
- isisd: consume leftover bytes after FAD sub-sub-TLV loop (backport #21544)
- nhrpd: stop debugging auth credentials (backport #21615)
- isisd: Reject SRv6 Locator TLV with Loc-Size of zero (backport #21641)
- bgpd: Revalidate locally originated routes against RPKI changes (backport)
Full Changelog: frr-10.2.5...frr-10.2.6