rpms/frr
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Routing daemon
53 Commits 11 Branches 75 Tags 592 KiB
Diff 100%
c9s
Go to file
RHEL Packaging Agent c859edd6ca Fix CVE-2026-37460: EVPN and ENCAP/VNC packet parsing validation 
Backport upstream commit 7676cad65114 to fix CVE-2026-37460.
The patch adds input validation for EVPN Type-2/3/4 NLRIs
in bgp_evpn.c and bgp_evpn_mh.c, and validates ENCAP/VNC
subtlv lengths in rfapi_rib.c to prevent crashes from
crafted BGP UPDATE messages.

CVE: CVE-2026-37460
Upstream patches:
 - 7676cad651.patch
Resolves: RHEL-193235

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-21 11:34:44 +00:00
.fmf Resolves: #2081304 - Enhanced TMT testing for centos-stream 2022-05-24 08:03:20 +02:00
.gitignore Resolves: RHEL-15291 - Rebase FRR to version 8.5.3 in RHEL9 2023-11-23 16:35:12 +01:00
0000-remove-babeld-and-ldpd.patch Resolves: RHEL-15291 - Rebase FRR to version 8.5.3 in RHEL9 2023-11-23 16:35:12 +01:00
0002-enable-openssl.patch Resolves: #2069563 - Rebase frr to version 8.2.2 2022-05-02 10:32:18 +02:00
0003-disable-eigrp-crypto.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 00:37:34 +02:00
0004-fips-mode.patch Resolves: RHEL-15291 - Rebase FRR to version 8.5.3 in RHEL9 2023-11-23 16:35:12 +01:00
0005-CVE-2023-47235.patch Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message 2023-12-18 15:27:19 +01:00
0006-CVE-2023-47234.patch Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message 2023-12-18 15:27:19 +01:00
0007-CVE-2023-46752.patch Resolves: RHEL-14822 - mishandled malformed data leading to a crash 2024-02-05 09:34:26 +01:00
0008-CVE-2023-46753.patch Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash 2024-02-05 10:21:30 +01:00
0009-bgp-graceful-restart-noop.patch Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions 2025-05-16 11:09:22 +02:00
0010-bfd-double-reset.patch Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions 2025-05-16 11:09:22 +02:00
0011-bfd-shutdown.patch Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions 2025-05-16 11:09:22 +02:00
0012-print-log-to-stdout.patch Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon 2025-04-03 14:39:57 +02:00
0013-bfd-bgp-recovery.patch Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions 2025-05-16 11:09:22 +02:00
0014-isisd-fuzz-test.patch Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions 2025-05-16 11:09:22 +02:00
0015-ipv6-wrong-hash.patch Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 2025-09-19 15:33:39 +02:00
0016-dont-ignore-kernel-route.patch Resolves: RHEL-64427 - FRR ignores kernel routes from the system 2025-10-29 12:16:37 +01:00
0017-fix-CVE-2026-37457.patch Resolves: RHEL-174677 - denial of service via crafted FlowSpec component 2026-05-21 15:56:46 +02:00
0018-ignored-int-after-flapping.patch Resolves: RHEL-152300 - ignored route in the kernel after flapping interface 2026-06-12 11:31:56 +02:00
0019-set-pythonnouser-env-var.patch Resolves: RHEL-176258 - AVC when reading user's site-packages 2026-07-03 12:46:45 +02:00
0020-fix-CVE-2026-37460.patch Fix CVE-2026-37460: EVPN and ENCAP/VNC packet parsing validation 2026-07-21 11:34:44 +00:00
ci.fmf Resolves: #2081304 - Enhanced TMT testing for centos-stream 2022-05-24 08:03:20 +02:00
frr-sysusers.conf Resolves: #2095404 - frr use systemd-sysusers 2022-06-14 09:37:25 +02:00
frr-tmpfiles.conf Resolves: RHEL-137180 - Files under /var are not properly created in image-mode 2026-01-19 09:46:54 +01:00
frr.fc Resolves: #2144500 - AVC error when reloading FRR with provided reload script 2022-11-24 10:50:53 +01:00
frr.if Resolves: #2216912 - SELinux is preventing FRR-Zebra to access to network namespaces 2023-08-07 14:51:11 +02:00
frr.spec Fix CVE-2026-37460: EVPN and ENCAP/VNC packet parsing validation 2026-07-21 11:34:44 +00:00
frr.te Related: #2216912 - adding sys_admin to capabilities 2023-08-10 10:56:34 +02:00
gating.yaml Update fmf plans and gating.yaml 2024-07-10 14:16:17 +02:00
plans.fmf Resolves: RHEL-137180 - Files under /var are not properly created in image-mode 2026-01-19 09:46:54 +01:00
README.md RHEL 9.0.0 Alpha bootstrap 2020-10-15 00:37:34 +02:00
rpminspect.yaml Related: #1939456 - adding rpminspect file to pass gating 2021-04-30 13:03:19 +02:00
sources Resolves: RHEL-15291 - Rebase FRR to version 8.5.3 in RHEL9 2023-11-23 16:35:12 +01:00

README.md

frr

The frr package