frr security update

An update is available for frr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It suppor...

RLSA-2026:24371 Important: frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: frr: denial of service via crafted FlowSpec component CVE-2026-37457 For more details about the security issues, including the...

frr10 security update

An update is available for frr10. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It take...

frr: denial of service via crafted FlowSpec component

A flaw was found in FRRouting FRR. A remote attacker can exploit an off-by-one out-of-bounds write vulnerability in the bgpflowspecopdecode function by supplying a specially crafted FlowSpec component. This issue can lead to a Denial of Service DoS...

The vulnerability of the bgpd/bgp_flowspec.c file in the software for implementing routing on Unix-like systems allows a hacker to cause a service failure.

The vulnerability of the bgpd/bgpflowspec.c file in the software implementation for network routing on Unix-like systems is related to the handling of incorrect requests without attributes. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the bgpd/bgp_flowspec.c file in the software for implementing routing on Unix-like systems allows a hacker to cause a service failure.

The vulnerability of the bgpd/bgpflowspec.c file in the software implementation for network routing on Unix-like systems is related to the handling of incorrect requests without attributes. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...