Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Docker - quay.io/frrouting/frr
What's Changed
- pimd: When address change ensure DR changes too. (backport #20881)
- bgpd: fix memory leak in cluster_intern() (backport #20913)
- doc: add some text regarding libyang versions (backport #20862)
- eigrpd: handle the gr neighbor list safely in update_receive (backport #20933)
- nhrpd: fix packet and buffer handling errors (backport #20932)
- bgpd: Add missing PEER_FLAG_SEND_NHC_ATTRIBUTE for update group flags (backport)
- bgpd: check more during flowspec nlri parsing (backport #19909)
- bgpd: Fix test for OPEN message with remote-as auto (backport #20963)
- ospfd: harden TE/SR TLV iteration against malformed lengths (backport #21002)
- bfdd: Fix wrong memory free when using ttable code (backport #21020)
- bgpd: fix off-by-one error in FlowSpec operator array bounds check (backport #21054)
- bgpd: Check if the NHC length is enough to fill TLV value + TLV header (backport #21074)
- ospfd: fix sequence number check, avoid truncation ambiguity (backport #21096)
- nhrpd: Correct addrlen check in os_recvmsg() (backport #21100)
- ldpd: improve tlv validation in several places (backport #21118)
- PIM message-handling code fixes (backport #21093)
- lib: disable warning in zlog.c to match master
- bgpd: fix some packet-parsing issues (10.4 version)
- isisd: fix edge condition in max_lsp_count computation (backport #21159)
- bgpd: Return 0 if AS4 capability is malformed (backport #21112)
- bgpd: Prevent heap use-after-free for tunnel encapsulation attribute (backport #21176)
- isisd: fix memory leak in remove_excess_adjs() (backport #21183)
- bgpd: improve packet parsing for EVPN and ENCAP/VNC (backport #21098)
- nhrpd: harden against malformed packets (backport #21097)
- bgpd: fix NHT for explicit link-local BGP peers (backport)
- ripngd: fix data handling in several places (10.4 version)
- bgpd: Recent bugs for 10.4
- vrrrpd: improve error handling in several paths (backport #21251)
- lib: fix zclient crash when many peers reconnect after FRR restart (backport #21056)
- bgpd: flowspec foobar hardening (backport #21308)
- bgpd: fix import vrf on non existing vrf (backport)
- ospf6d: improve/harden packet processing (backport #21277)
- pceplib: validate during of_list TLV decoding (backport #21310)
- bgpd: Revalidate locally originated routes against RPKI changes (backport)
- bfdd: harden packet validation and reflector handling (backport #21105)
- pimd: fix crash due to double free (backport #21354)
- eigrpd: improve validation and error-handling in tlv parsing (backport #21316)
- bgpd: hardening backports 10.4
- bgpd: Do not allocate stream if route-refresh capability is not received (backport #21394)
- bgpd: Check dynamic capability action before validating ENHE capability (backport #21395)
- pimd: guard channel OIL detach against stale pointers (backport #21431)
- isisd: improve validation of flex-algo decoder (backport) (backport #21463)
- ospfd: add validation in several places before accessing message bodies (backport #21303)
- bgpd: Fix mixed remote-as for peer-groups when using auto (backport #21406)
- ospfd: add LSA validation in the apiserver path (backport #21536)
- bgpd: Don't mark nexthop as changed if a set next-hop unchanged is applied (backport #21445)
- eigrpd: enforce minimum TLV length in Hello handler (backport #21543)
- isisd: use correct min size values for srv6 subtlvs (backport #21540)
- eigrpd: reject invalid prefix mask len (backport #21539)
- bgpd: fix neighbor IP comparison for IPv6 memcmp return values (backport #21559)
- eigrpd: Handling for malformed update packets (10.4 version)
- eigrpd: fix byte order in Hello authentication decode (backport #21545)
- lib: Report IPv6 MTU and not IPv4 for if_update_state_mtu6 (backport #21501)
- bgp_evpn: fix memleak when configuring rd (backport #21566)
- isisd: consume leftover bytes after FAD sub-sub-TLV loop (backport #21544)
- nhrpd: stop debugging auth credentials (backport #21615)
- bgpd: honor 'no activate' for dynamic neighbors in peer-group (backport #21658)
- bgpd: Dynamic capability parsing fixes (backport #21603)
- isisd: Reject SRv6 Locator TLV with Loc-Size of zero (backport #21641)
Full Changelog: frr-10.4.3...frr-10.4.4