FRRouting Release 8.5.5 [Download]

FRRouting Release 8.5.5 Available for Download

We are pleased to announce FRR 8.5.5.

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - quay.io/frrouting/frr:8.5.5

Fixed CVEs

• CVE-2024-31950
• CVE-2024-31951
• CVE-2024-31948

Bug Fixes

bgpd

• “default-originate” shouldn’t withdraw non-default routes
• Ensure community data is freed in some cases.
• Ensure that the correct aspath is free’d
• Fix error handling when receiving bgp prefix sid attribute
• Fix format overflow for graceful-restart debug logs
• Fix null argument warning
• Include unsuppress-map as a valid outgoing policy
• Make suppress-fib-pending clear peering
• Prevent from one more cve triggering this place

doc

• Add param range for graceful-restart helper supported-grace-time

isisd

• Fix heap-after-free with prefix sid
• Need to link directly against libyang

lib

• Check for not being a blackhole route
• Do not convert evpn prefixes into ipv4/ipv6 if not needed

nhrpd

• Fix nhrp_peer leak
• Fix race condition
• Fix core dump on shutdown

ospf6d

• Ospfv3 route change comparision fixed for asbr-only change

ospfd

• Correct opaque lsa extended parser
• Fix ospf dead-interval minimal hello-multiplier param range
• Fix the bug where ip_ospf_dead-interval_minimal_hello-multiplier did not reset hello timer
• Protect call to get_edge() in ospf_te.c
• Solved crash in ri parsing with ospf te

pbrd

• Fix pbr handling for last rule deletion

pimd

• Fix crash unconfiguring rp keepalive timer
• Fix crash when configuring ssmpingd
• Fix dr-priority range
• Fix null register before aging out reg-stop
• Fix order of operations for evaluating join
• Re-evaluated s,g oils upon rp changes and for empty sg upstream oils

tests

• Check for 0.0.0.0/1 in bgp_default_route

vtysh

• Show ip ospf network ... even if it’s not the same as the interface type

zebra

• Deny the routes if ip protocol cli refers to an undefined rmap
• Fix crash if macvlan link in another netns
• Fix nhg out of sync between zebra and kernel
• Re-install dependent nhgs on interface up
• Re-install nhg on interface up
• The dplane_fpm_nl return path leaks memory

Full Changelog: https://github.com/FRRouting/frr/compare/frr-8.5.4...frr-8.5.5