Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Docker - quay.io/frrouting/frr
What's Changed
- isisd: Reject duplicate SRv6 SID Structure Sub-Sub-TLV (backport #21656) by @mergify[bot] in #21722
- isisd: validate ASLA sub-sub-TLV length ... (10.6 backport of 21542) by @mjstapp in #21721
- lib: fix mgmt_msg recv to deal with mis-alignment (backport #21651) by @mergify[bot] in #21726
- pimd: cap PIM Hello secondary address list parsing (backport #21707) by @mergify[bot] in #21736
- pimd: reject truncated IP datagrams before IGMP/mtrace handling (backport #21705) by @mergify[bot] in #21713
- bgpd: Fixed crash in bgp received-routes detail json and code cleanup (backport #20930) by @mergify[bot] in #21748
- nhrpd: improve validation in packet parsing (backport #21686) by @mergify[bot] in #21761
- pimd: harden BSM group/RP parsing paths (backport #21734) by @mergify[bot] in #21766
- pimd: Provide better ordering for calling pim_upstream_use_rpt (backport #21764) by @mergify[bot] in #21771
- bgpd: Add some defences for AS4/ENCAP handling (backport #21777) by @ton31337 in #21790
- bgpd: Fix EVPN shutdown memory leak (backport #21511, #21698) by @ton31337 in #21805
- bgpd: fix EVPN VRF auto RT deletion collision (backport #21808) by @mergify[bot] in #21835
- bfdd: avoid close(-1) in bfd_dplane_finish_late (backport #21841) by @mergify[bot] in #21848
- zebra: tear down old L3VNI before adding new one on VNI value change (backport #21757) by @mergify[bot] in #21856
- pimd: validate PIM LAN sources and cap neighbors (backport #21747) by @mergify[bot] in #21853
- bgpd: Allow
no network ....form for safi = EVPN or MPLS_VPN (backport #21860) by @mergify[bot] in #21869 - bgpd: Skip route clearing for peers that were never established (backport #21867) by @mergify[bot] in #21879
- yang: allow match-metric value of zero (backport #21888) by @mergify[bot] in #21890
- ospf6d: Fix command output for default route (backport #21886) by @mergify[bot] in #21894
- bgpd: Fix srv6 type parsing and EVPN type-5 NLRI prefix lengh parsing for IPv4 (backport #21345) by @mergify[bot] in #21897
- bgpd: only use srv6_l3service attr if it's present (backport #21916) by @mergify[bot] in #21917
- bgpd: validate SRV6 service sid transposition values (backport #21903) by @mergify[bot] in #21936
- pimd: MLAG: skip pim_register_join on non-DR (backport #21920) by @mergify[bot] in #21933
- lib: add missing hook_unregister_arg in mgmt_be_client_destroy (backport #21940) by @mergify[bot] in #21944
- Fix event bugs in ldpd/lib and fix bgp_bmp misshandling of memory that leads to a crash (backport #21952) by @mergify[bot] in #21954
- pimd: Fix crash when up->channel_oil is NULL (backport #21961) by @mergify[bot] in #21963
- bgpd: cancel LLGR stale timer on peer AF delete (backport #21947) by @mergify[bot] in #21968
- bgpd: cancel BFD strict hold timer on peer delete (backport #21926) by @mergify[bot] in #21975
- bgpd: BGPd crash due to multiple bnc entry linked to same peer. (backport #21962) by @mergify[bot] in #21987
- ospfd: remove unnecessary space (backport #21979) by @mergify[bot] in #21993
- bgpd: Clear SRv6 unicast SIDs on locator delete (backport #21948) by @ton31337 in #22014
- bgpd: fix attr comparison when using attr_intern_reuse cache (backport #22008) by @mergify[bot] in #22040
- ospfd: prevent stale LSA from corrupting local OSPF DB after reboot (backport #20601) by @mergify[bot] in #22037
- zebra: fix neighbor entries ns_id (backport #22034) by @mergify[bot] in #22072
- bgpd: Fix use-after-free for ORF case (backport #22080) by @mergify[bot] in #22087
- bgpd: Skip route-map LPM optimisation for AF_FLOWSPEC (backport #22083) by @mergify[bot] in #22098
- bgpd: Fix infinite loop in MRT route dump for oversized paths (backport #22082) by @mergify[bot] in #22106
- lib, zebra: bound SRv6 locator name length in ZAPI (backport #21868) by @cscarpitta in #22018
- tests: fix flaky IGMP source baseline in pim_boundary_acl (backport #22055) by @mergify[bot] in #22149
- pimd: fix mapping agent AutoRP discovery packet size (backport #22121) by @mergify[bot] in #22141
- tests: harden topotest gcov coverage setup and reporting (backport #22104) by @mergify[bot] in #22145
- pimd: guard NULL RP lookups in BSM and RP deletion paths (backport #22131) by @mergify[bot] in #22139
- tests: reap mutini zombies and skip post-teardown support bundles (backport #22096) by @mergify[bot] in #22147
- lib: test the right bytes in flowspec prefixes (backport #22138) by @mergify[bot] in #22152
- bgpd: remove unneeded sort of communities in rmap delete (backport #22151) by @mergify[bot] in #22154
- pimd: fix BSR failover RP not setting i_am_rp locally (backport #22157) by @mergify[bot] in #22163
- bgpd: Set extended flag for NHC attribute when re-encoding (backport #22159) by @mergify[bot] in #22165
- bgpd: Avoid cluster list attribute truncation (backport #22081) by @mergify[bot] in #22170
- pimd: BSR/C-RP fixes with expanded topotest coverage (backport #22117) by @mergify[bot] in #22180
- bgpd: Fixes in comm/lcomm/ecomm str functions (backport #22176) by @mergify[bot] in #22185
- pimd: Auto-RP hardening for discovery and announcements (backport #21745) by @mergify[bot] in #21923
- doc: fix merge conflict in pim.rst on 10.6 by @Jafaral in #22192
- pimd: move dense (S,G) to sparse mode when an RP is added (backport #20003) by @mergify[bot] in #22195
- pimd: fix multicast boundary list lifetime and ACL evaluation (backport #22122) by @Jafaral in #22199
- pimd: defer static mroute install until interfaces are ready (backport #22156) by @mergify[bot] in #22201
- bgpd: free srv6_l3service object in failed parse path by @mjstapp in #22214
- ospfd: validate extended prefix TLV before accessing prefix SID (backport #22215) by @mergify[bot] in #22219
- lib: bound masklen values, don't assert by @mjstapp in #22216
- topotests: fix parallel run hangs (mutini teardown, ExaBGP FIFO, Docker hosts) (backport #22007) by @mergify[bot] in #22194
- tests: fix grpc topotest xdist collection mismatch in CI (backport #22048) by @mergify[bot] in #22193
- pimd: fix shared-LAN (S,G) MFC loop and expand ssm topotest (backport #21998) by @mergify[bot] in #22209
- pimd: fix AutoRP stale RPs and selective multicast joins, add missing docs (backport #22039) by @mergify[bot] in #22208
- pimd: fix AutoRP holdtime parsing and minor cleanup (backport #22120) by @mergify[bot] in #22143
- pimd: dense mode fixes and topotest coverage (backport #22115) by @mergify[bot] in #22182
- pimd: fix heap OOB write in BSM fragmenter (backport #22222) by @mergify[bot] in #22225
- pimd: fix dense mode State Refresh relay forwarding (backport #22177) by @mergify[bot] in #22203
- ospfd: Validate PREFIX_SID subtlv len before accessing (backport #22218) by @mergify[bot] in #22231
- bgpd: Fix community string truncation for big community sets (backport #22160) by @mergify[bot] in #22245
- yang: inet type mismatch in frr-bfdd.yang (backport #22241) by @mergify[bot] in #22252
- bgpd: fixes for NH and aggregator attribute parsing (backport #22200) by @mergify[bot] in #22267
- bgpd: add LLGR to capability length validation switch (backport #22249) by @mergify[bot] in #22263
- bgpd: fix return NULL in bool function ecommunity_node_target_match (backport #22273) by @mergify[bot] in #22280
- pimd: fix wrong endian convertion (backport #22244) by @mergify[bot] in #22258
- bgpd: fix holdtime_ptr unsafe pointer aliasing in OPEN receive path (backport #22270) by @mergify[bot] in #22285
- bgpd: skip peers not activated for AFI/SAFI in bgp_gr_check_all_eors() (backport #22295) by @mergify[bot] in #22303
- bgpd: Fix extended optional parameters handling in OPEN message (backport #22308) by @mergify[bot] in #22322
- Also build for linux/riscv64 on release (backport #22256) by @mergify[bot] in #22342
- bgpd,tests: improve validation of incoming oid arrays (backport #22116) by @mergify[bot] in #22380
- tools: Fix frr-reload.py crashes with UnboundLocalError (backport #22378) by @mergify[bot] in #22387
- pimd: use RFC 3973 dm graft retry period for retransmission (backport #22376) by @mergify[bot] in #22390
- bgpd: don't advertise LLGR stale routes to non-LLGR peers (backport #22297) by @mergify[bot] in #22401
- tests: load frr.conf by default (backport #22398) by @mergify[bot] in #22416
- bgpd: reduce ibuf_scratch size to match ibuf_work (backport #22347) by @mergify[bot] in #22394
- bgpd: fix strlcat/strlcpy size parameter in NOTIFICATION send path (backport #22279) by @mergify[bot] in #22432
- bgpd: Fix memory leak for EVPN Type-4 and dangling pointer for bgp_debug_rdpfxpath2str() (backport #22210) by @mergify[bot] in #22446
- pimd: fix BSR_PENDING timer being overwritten by BS liveness timer (backport #22460) by @mergify[bot] in #22464
- bgpd: fix bmp connect deletion with source-interface (backport #22469) by @mergify[bot] in #22509
- pimd: fix elected BSR not updating when priority changes (backport #22465) by @mergify[bot] in #22478
- bgpd: Ignore parsing ORF route-refresh messages (backport #22429) by @mergify[bot] in #22456
- bgpd: Do not accept AIGP for OAD peers if not enabled (backport #22519) by @mergify[bot] in #22526
- Merge pull request #22423 from rdemsystems/fix/bgp-extended-message-r… by @rdemsystems in #22544
- ldpd: check fec elem length before accessing (backport #22537) by @mergify[bot] in #22560
- ospf6d: check length before accessing grace LSA TLVs (backport #22539) by @mergify[bot] in #22557
- pimd: MLAG: gate FHR flag on DR check in wrvifwhole/wholepkt upcalls (backport #22529) by @mergify[bot] in #22573
- *: fix overflow in comparator functions used by sorted containers (backport #22498) by @mergify[bot] in #22575
- pimd: clean stale upstream NHT tracking on RP delete (backport #22505) by @mergify[bot] in #22606
- bgpd: don't emit "no neighbor X capability link-local" (backport #22540) by @mergify[bot] in #22665
- bgpd: Reject malformed NHC attribute with a trailing partial TLV (backport #22673) by @mergify[bot] in #22699
- lib: fix wrong nexthop comparision for SRv6 (backport #22710) by @mergify[bot] in #22714
- ospf6d: avoid route use after unlock in best route iterator (backport #22549) by @mergify[bot] in #22712
- bgpd: Preserve disable_ieee_floating on link-bandwidth extended communities (backport #22682) by @mergify[bot] in #22739
- lib: fix wrong nexthop comparision for SRv6 by @ton31337 in #22760
- bgpd: Add boundary checks when parsing sub-sub TLVs for srv6 prefix sid by @ton31337 in #22765
- lib: Fix ZAPI SRv6 nexthop comparison (backport #22772) by @mergify[bot] in #22787
- bgpd: Fix crash for
no neighbor X path-attribute discard ...(backport #22785) by @mergify[bot] in #22794 - lib: Clear seg6local context when deleting seg6local state (backport #22790) by @mergify[bot] in #22800
- bgpd: Fix link-bandwidth extended community handling above ~34 Gbps (backport #22681) by @mergify[bot] in #22846
- bgpd: fix BAD_COPY_PASTE in bgp_path_info_cmp() (backport #22838) by @mergify[bot] in #22860
- bgpd: fix link-bandwidth AS truncation in route-map for extended encoding (backport #22867) by @mergify[bot] in #22869
- A couple minor bgpd fixes #22512 by @ton31337 in #22856
- zebra: Fix SRv6 source-address config output (backport #22879) by @mergify[bot] in #22903
- zebra: Fix SRv6 locator delete after no prefix (backport #22882) by @cscarpitta in #22905
- bgpd: fix RD route_node refcount leak in bgp_safi_node_lookup() (backport #22938) by @mergify[bot] in #22941
- bgpd: Fix route-map use count for EVPN
no advertise(backport #22945) by @mergify[bot] in #22955 - isisd: Fix Router Capability subTLV parsing (backport #22873) by @mergify[bot] in #22977
- zebra: backport stale ifp cleanup PRs to 10.6 (backport #22969) by @mergify[bot] in #22972
- ospf6d: bypass MinLSArrival for self-originated MaxAge LSAs (10.6 backport) by @mjstapp in #23006
- *: fix some mem leaks in error paths (backport #23031) by @mergify[bot] in #23034
- bgpd: fix self nexthop overwrite in unnumbered interfaces setup (backport #23054) by @mergify[bot] in #23081
- zebra: add TUNNEL_CSUM to netlink EVPN DVNI encode (backport #23058) by @mjstapp in #23083
- github: Drop commitlint check by @ton31337 in #23086
- bgpd: allow GR-helper stale paths through the evaluate_paths peer-down skip (backport #23067) by @mergify[bot] in #23112
- zebra: notify the client when an SRv6 SID allocation fails (backport #23051) by @mergify[bot] in #23129
- bgpd: fix crash when 'debug bgp updates out' enabled (backport #23087) by @mergify[bot] in #23152
Full Changelog: frr-10.6.1...frr-10.6.2