Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Docker - quay.io/frrouting/frr
What's Changed
- doc: fix indentation error in pim doc (backport #21373)
- Fix/bgp hardening backports 10.6
- isisd: improve validation of flex-algo decoder (backport #21314)
- bgpd: Do not allocate stream if route-refresh capability is not received (backport #21394)
- bgpd: Check dynamic capability action before validating ENHE capability (backport #21395)
- bgpd: Do not allow triggering route-refresh path with a malformed ORF length (backport #21399)
- pimd: guard channel OIL detach against stale pointers (backport #21431)
- ospfd: add validation in several places before accessing message bodies (backport #21303)
- pimd: fix NOCACHE MFC resync detection log, add vrf name too (backport #21481)
- bgpd: Fix mixed remote-as for peer-groups when using auto (backport #21406)
- bgpd: Don't mark nexthop as changed if a set next-hop unchanged is applied (backport #21445)
- ospfd: add LSA validation in the apiserver path (backport #21536)
- eigrpd: reject invalid prefix mask len (backport #21539)
- eigrpd: enforce minimum TLV length in Hello handler (backport #21543)
- isisd: use correct min size values for srv6 subtlvs (backport #21540)
- bgpd: fix neighbor IP comparison for IPv6 memcmp return values (backport #21559)
- bgp_evpn: fix memleak when configuring rd (backport #21566)
- eigrpd: fix byte order in Hello authentication decode (backport #21545)
- lib: Report IPv6 MTU and not IPv4 for if_update_state_mtu6 (backport #21501)
- bgpd: Prevent out-of-bound reading handling soft version dynamic capability (backport #21602)
- isisd: continue hardening SRV6 tlv parsing (backport #21585)
- bgpd: Dynamic capability parsing fixes (backport #21603)
- isisd: consume leftover bytes after FAD sub-sub-TLV loop (backport #21544)
- bgpd: Harden SRv6 Service Data parser for SID Structure length (backport #21612)
- nhrpd: stop debugging auth credentials (backport #21615)
- bgpd: honor 'no activate' for dynamic neighbors in peer-group (backport #21658)
- bgpd: migrate timers during peer_xfer_conn to fix stale route cleanup (backport #21558)
- isisd: correct SRv6 End.X SID minimum size constants (backport #21541)
- isisd: Reject SRv6 Locator TLV with Loc-Size of zero (backport #21641)
- bgpd: Validate if NHC BGPID TLV value is non-zero (backport #21611)
- bgpd: Check if BGPID NHC TLV exists when IPv6 next-hop is link-local (backport #21377, #21605, #21611)
Full Changelog: frr-10.6.0...frr-10.6.1