Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Docker - quay.io/frrouting/frr
What's Changed
- Alpine Docker fix ups for 3.22 (backport #20004)
- bgpd: update source address for bgp neighbor (backport #20330)
- docker: Add missing
pytestpackage for Alpine as dependency (backport #20369) - bgpd: Use the default local-preference value and not 0 when adjusting (backport #20400)
- eigrpd: Prevent crash in packet handling (backport #20410)
- zebra: Fix memory leak when SRv6 explicit SID allocation fails (backport #20429)
- isisd: fix crash when changing isis type (backport #20171)
- zebra: Fix memory leak when SRv6 dynamic SID allocation fails (backport #20445)
- ospfd: fixed ospf nssa flush issue (backport #20428)
- zebra: EVPN check l3vni vxlan intf exist in rmac install (backport #20494)
- bgpd: Fix multipath decision when multipath is 1 (backport #20493)
- bgpd: reduce ibuf_work ring buffer size (backport #20554)
- zebra: fix crash on inactive VRF and import table (backport #20525)
- zebra: FRR restart leads to zebra mlag core (backport #20225)
- bgpd: Fix double-free crash in peer_delete() during doppelganger peer… (backport #20661)
- staticd: Fix SRv6 SID use-after-free on locator deletion (backport #20660 for 10.3)
- bgpd: fix md5 password unset on dynamic nbr (backport #20740)
- bgpd: Ignore transitiveness flag when checking type for link bandwidth (backport #20607)
- bgpd: EVPN MH fix unimport ES route on vtep change (backport #20730)
- Zebra fixup nhg handling from kernel (backport #20732)
- bgpd: validate incoming NOTIFICATION messages (backport #20796)
- Multiple local fix (backport #20798)
- bgpd: improve flowspec NLRI validation (backport #20814)
- zebra: EVPN fix access BD deref of mbr intf (backport #20791)
- doc: add some text regarding libyang versions (backport #20862)
- bgpd: Fix test for OPEN message with remote-as auto (backport #20963)
- ospfd: harden TE/SR TLV iteration against malformed lengths (backport #21002)
- bfdd: Fix wrong memory free when using ttable code (backport #21020)
- bgpd: fix off-by-one error in FlowSpec operator array bounds check (backport #21054)
- ospfd: fix sequence number check, avoid truncation ambiguity (backport #21096)
- ldpd: improve tlv validation in several places (backport #21118)
- isisd: fix edge condition in max_lsp_count computation (backport #21159)
- bgpd: Return 0 if AS4 capability is malformed (backport #21112)
- bgpd: Prevent heap use-after-free for tunnel encapsulation attribute (backport #21176)
- bgpd: improve packet parsing for EVPN and ENCAP/VNC (backport #21098)
- nhrpd: harden against malformed packets (backport #21097)
- vrrrpd: improve error handling in several paths (backport #21251)
- ripngd: fix data handling in several places (backport #21257)
- ospf6d: improve/harden packet processing (backport #21277)
- bgpd: Revalidate locally originated routes against RPKI changes (backport)
- lib: fix zclient crash when many peers reconnect after FRR restart (backport #21056)
- pceplib: validate during of_list TLV decoding (backport #21310)
- bgpd: Do not allocate stream if route-refresh capability is not received (backport #21394)
- bgpd: Check dynamic capability action before validating ENHE capability (backport #21395)
- bgpd: Don't mark nexthop as changed if a set next-hop unchanged is applied (backport #21445)
- ospfd: add LSA validation in the apiserver path (backport #21536)
- eigrpd: enforce minimum TLV length in Hello handler (backport #21543)
- lib: ignore gcc warning in 10.3 zlog lttng code
- eigrpd: reject invalid prefix mask len (10.3 backport)
- isisd: use correct min size values for srv6 subtlvs (backport #21540)
- ospfd: add validation in several places before accessing message bodies (backport #21303)
- bgpd: fix neighbor IP comparison for IPv6 memcmp return values (backport #21559)
- eigrpd: fix byte order in Hello authentication decode (backport #21545)
- bgpd: Dynamic capability parsing fixes (backport #21603)
- isisd: consume leftover bytes after FAD sub-sub-TLV loop (backport #21544)
- nhrpd: stop debugging auth credentials (backport #21615)
- isisd: Reject SRv6 Locator TLV with Loc-Size of zero (backport #21641)
Full Changelog: frr-10.3.3...frr-10.3.4