Releases: FRRouting/frr
FRR Release 10.2
We are pleased to announce FRR release 10.2.
FRR 10.2 brings a long list of enhancements and fixes with 748 commits from 59 developers. Thanks to all contributors.
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Release Overview
Breaking changes
- New "router pim" config node now contains all pim commands similar to other protocols. Existing global PIM commands are deprecated, and may be removed in the future. [#16269]
New Features Highlight:
- PIM candidate BSR/RP [#16438]
- Static IGMP join without an IGMP report [#16450]
- PIM AutoRP discovery/announcements [#16634]
- IGMP proxy [#16861]
- SRv6 SID Manager [#15604]
- Add
bgp ipv6-auto-ra
command [#16354] - Implement
neighbor x remote-as auto
for BGP [#16345] - Implement
bgp dual-as
for BGP [#16816] - Implement BGP-wide configuration for graceful restart [#16099]
- Handle kernel routes appropriately (should fix recent NOPREFIXROUTE issue) [#16300]
- Add
cisco-authentication
password support for NHRP [#16172]
What's Changed
- mgmtd: add notification selection to front-end API by @choppsv1 in #16184
- yang: fix wrong check for isis metric style by @anlancs in #16188
- tests: suppress unused variables at topotests by @y-bharath14 in #16202
- zebra: Use built in data structure counter by @donaldsharp in #16221
- doc: fix one ldp neighbor command by @anlancs in #16225
- ospfd: Drop
interfaceIp
fromshow ip ospf neigh json
by @ton31337 in #16195 - bgpd: Do not start BGP session if BFD profile is in shutdown state by @ton31337 in #16194
- isisd: fix 'show isis route prefix-sid backup' command by @pguibert6WIND in #16179
- nhrpd: add cisco-authentication password support by @dleroy in #16172
- bgpd: fix do not skip paths with same nexthop by @pguibert6WIND in #16153
- zebra: Set the weight for non-recursive next-hop by @ton31337 in #16236
- isisd: After the router switches IS-IS type several times, the neighbor adjacency cannot be established. by @zhou-run in #16230
- Add support for SRv6 SID Manager by @cscarpitta in #15604
- lib: add json API to dump and override row naming convention by @pguibert6WIND in #16237
- tests: Avoid importing unused modules by @y-bharath14 in #16227
- bgpd: Convert over to using vrf name instead of id by @donaldsharp in #16223
- zebra: Prevent starvation in dplane_thread_loop by @donaldsharp in #16224
- bgpd: backpressure - fix evpn route sync to zebra by @chiragshah6 in #16234
- doc: Document the usage of --enable-undefined-sanitizer by @donaldsharp in #16243
- bgpd: fixed failing to remove VRF if there is a stale l3vni by @kacpekwasny in #16059
- bgpd: fix do not use api.backup_nexthop in ZAPI message by @pguibert6WIND in #16260
- zebra: fix evpn mh bond member proto reinstall by @chiragshah6 in #16252
- ospfd: Improve OSPF neighbor retransmission list granularity and pacing by @aceelindem in #16128
- pimd: Candidate RP/BSR preparation by @eqvinox in #16259
- bgpd: Set last reset reason to admin shutdown if it was manually by @ton31337 in #16242
- bgpd: Check if we have really enough data before doing memcpy for software version by @ton31337 in #16211
- bgpd: Check if we have really enough data before doing memcpy for FQDN capability by @ton31337 in #16213
- bgpd: fix "bgp as-pah access-list" with "set aspath exclude" set/unset issue by @fdumontet6WIND in #15838
- docker: Adopt for Alpine Linux 3.20 by @ton31337 in #16222
- isisd: fix crash in display srv6 sid structure in json by @louis-6wind in #16267
- zebra: clear evpn dup-addr return error-msg when there is no vni by @chiragshah6 in #16261
- zebra: Fix coverity issues by @cscarpitta in #16270
- bgpd: Relax OAD (One-Administration-Domain) for RFC8212 by @ton31337 in #16273
- bgpd: A couple more fixes for Tunnel encapsulation handling by @ton31337 in #16214
- Isis show route paths json by @pguibert6WIND in #16182
- bgpd: avoid clearing routes for peers that were never established by @lsang6WIND in #16271
- pimd: fix misplaced braces/logic error in pim_rp_set_upstream_addr by @eqvinox in #16299
- doc: reformat Sphinx conf.py files by @qlyoung in #16301
- doc: improve table-of-contents organization by @qlyoung in #16297
- doc: add ability to disambiguate clicmds by @qlyoung in #14509
- bgpd: Ignore routes from evpn if VRF is unknown by @piotrsuchy in #16068
- bgpd: Ignore RFC8212 for BGP Confederations by @ton31337 in #16305
- ripd/ripd.c - rip_auth_md5 : Change the start value of sequence 1 to 0 by @T-Nicolas in #16233
- isisd: Fix memory leaks when the transition of neighbor state from non-UP to DOWN by @zhou-run in #15716
- Add option to build pkg with grpc support by @mwinter-osr in #16094
- isisd: fix crash when obtaining the next hop to calculate LFA on LAN links by @zhou-run in #16303
- isisd: Extend IS-IS to communicate with the SRv6 SID Manager to allocate/release SRv6 SIDs by @cscarpitta in #15677
- Implement BGP-wide configuration for graceful restart by @Pdoijode in #16099
- ldpd: fix wrong gtsm count by @anlancs in #16226
- tests: Add basic BGP per-safi dampening topotest by @ton31337 in #16331
- bgpd: Drop memset() before encoding EVPN extended communities by @ton31337 in #16333
- yang: Corrected typo at yang file by @y-bharath14 in #16339
- bgpd: Move sticky, default_gw, router_flag into a single flags variable by @ton31337 in #16334
- bgpd: Implement
neighbor X remote-as auto
by @ton31337 in #16345 - sharpd: fix set ZAPI_MESSAGE_NEXTHOP in nhg only when nexthops used by @pguibert6WIND in #16346
- isisd: When operating multiple areas, the system ID behaves abnormally. by @zhou-run in #16090
- tests: Extended bgp_remote_as_auto topotest with unnumbered case by @ton31337 in #16348
- ospfd: Fix several problems with direct and delayed acknowledgments by @aceelindem in #16351
- tests: Rename BGP OAD test function by @ton31337 in #16352
- bgpd: Print tableid when sending (add/remove) routes to Zebra by @ton31337 in #16353
- lib, tests: fix some b0rked tests, then fix TSAN warnings by @eqvinox in #16258
- isisd: The neighbor entry still displays the deleted hostname of the neighbor. by @zhou-run in #16241
- Duplicate fib proposal by @pguibert6WIND in #16342
- ripd/ripngd: use common header for display command by @anlancs in #16229
- lib: Discourage usage of deprecated data structures by @donaldsharp in #16140
- yang: Added default value to leaf by @y-bharath14 in #16369
- tests: tweak timers to avoid frequent failures on slow CI hardware by @Jafaral in #16363
- zebra: Fix to avoid two Vrfs with same table ids by @raja-rajasekar in #16350
- staticd: fix missing static routes by @anlancs in #16373
- isisd: fix crash when calculating the neighbor spanning tree based on the fragmented LSP by @zhou-run in #16365
- bgpd: Mark VRF instance as auto created if import vrf is configured for this instance by @ton31337 in #16374
- bgpd: backpressure - fix to properly remove dest for bgp under deletion by @raja-rajasekar in #16368
- ospfd: fix state location mixup by @eqvinox in https://github.com/FRRouting/...
FRR release 8.4.6
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-44070
More details: https://frrouting.org/security/cve-2024-44070
Bug Fixes
isisd
- Fix update link params after circuit is up
bgpd
- Fix crash at no rpki
- Fix for CVE-2024-44070
tools
- Ignore errors for frr reload stuff
FRR Release 9.1.2
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-44070
More details: https://frrouting.org/security/cve-2024-44070
Bug Fixes
bgpd
- Fix crash at no rpki
- Fix, do not access peer->notify.data when it is null
- Fix for CVE-2024-44070
- Ignore RFC8212 for BGP Confederations
- Check if we have really enough data before doing memcpy for software version
- Set last reset reason to admin shutdown if it was manually
isisd
- Fix crash when reading asla
- Add missing
exit
statement - Fix update link params after circuit is up
- Fix crash when calculating the neighbor spanning tree based on the fragmented LSP
zebra
- Ensure non-equal id's are not same nhg's
pimd
- Fix msdp setting of sa->rp
- Fix crash on non-existent interface
ospfd
- Fix internal ldp-sync state flags when feature is disabled
zebra
- Fix missing static routes
- Fix to avoid two Vrfs with same table ids
- Fix evpn mh bond member proto reinstall
ldpd
- Fix wrong gtsm count
ripd
- Change the start value of sequence 1 to 0
FRR release 9.0.4
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-44070
More details: https://frrouting.org/security/cve-2024-44070
Bug Fixes
bgpd
- Fix crash at no rpki
- Fix, do not access peer->notify.data when it is null
- Fix for CVE-2024-44070
- Ignore RFC8212 for BGP Confederations
- Set last reset reason to admin shutdown if it was manually
isisd
- Fix crash when reading ASLA
- Fix update link params after circuit is up
- Fix crash when calculating the neighbor spanning tree based on the fragmented LSP
ripd
- Change the start value of sequence 1 to 0
tools
- Ignore errors for frr reload stuff
ospfd
- Fix internal ldp-sync state flags when feature is disabled
pimd
- Fix crash on non-existent interface
zebra
- Fix missing static routes
- Ensure non-equal id's are not same nhg's
ldpd
- Fix wrong gtsm count
FRR release 8.5.6
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-44070
More details: https://frrouting.org/security/cve-2024-44070
Bug Fixes
isisd
- Fix update link params after circuit is up
bgpd
- Fix crash at no rpki
- Fix for CVE-2024-44070
- Ignore RFC8212 for BGP Confederations
tools
- Ignore errors for frr reload stuff
FRR release 10.1.1
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-44070
More details: https://frrouting.org/security/cve-2024-44070
Bug Fixes
bgpd
- Fix as-path exclude modify crash
- Fix labels static-analyser
- Fix, do not access peer->notify.data when it is null
- Fix crash at no rpki
- Fix memory type for static->prd_pretty
- Revert "topotests: add an ebgp 6vpe test"
- Revert "topotests: add bgp_nexthop_mp_ipv4_6 test"
- Revert "bgpd: optimize bgp_interface_address_del"
- Revert "bgpd: fix removing ipv6 global nexhop"
- Revert "bgpd: fix "used" json key on link-local nexthop"
- Revert "tests: ipv6 global removal in bgp_nexthop_mp_ipv4_6"
- Revert "bgpd: set ipv4-mapped ipv6 for ipv4 with ipv6 nexthop"
- Revert "bgpd: prefer link-local to a ipv4-mapped ipv6 global"
- Revert "topotests: update bgp_vrf_leaking_5549_routes"
- Revert "bgpd: optimize bgp_interface_address_add"
- Revert "bgpd: reduce bgp_interface_address_add indentation"
- Revert "bgpd: log new ipv6 global in bgp_interface_address_add"
- Revert "bgpd: fix sending ipv6 local nexthop if global present"
isisd
- Fix crash when reading asla
- Add missing
exit
statement - Fix update link params after circuit is up
- Fix crash at flex-algo without mpls-te
- Fix memory handling in isis_adj_process_threeway()
nhrpd
- Fix show nhrp shortcut json
- Fix sending /32 shortcut
pimd
- Fix crash in pimd
mgmtd
- Don't add implicit state data when reading config from file
lib
- Fix distribute-list deletion
- Fix crash on distribute-list delete
- Fix LYD_NEW_PATH_OUTPUT issue to support libyang v3.x
ripd
- Fix show run output for distribute-list
zebra
- Ensure non-equal id's are not same nhg's
- Mimic GNU basename() API for non-glibc library e.g. musl
FRR release 10.0.2
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Fixed CVE-2024-44070
More details: https://frrouting.org/security/cve-2024-44070
Bug Fixes
bgpd
- Fix as-path exclude modify crash
- Fix, do not access peer->notify.data when it is null
- Fix crash at no rpki
- Ignore RFC8212 for BGP Confederations
- Fix for CVE-2024-44070
- Relax OAD (One-Administration-Domain) for RFC8212
- Fix "bgp as-pah access-list" with "set aspath exclude" set/unset issues
- Check if we have really enough data before doing memcpy for FQDN capability
- Check if we have really enough data before doing memcpy for software version
- Set last reset reason to admin shutdown if it was manually
- Fix do not use api.backup_nexthop in ZAPI message
isisd
- Fix crash when reading asla
- Add missing
exit
statement - Fix update link params after circuit is up
- Fix crash at flex-algo without mpls-te
- Fix memory handling in isis_adj_process_threeway()
- Fix crash when calculating the neighbor spanning tree based on the fragmented LSP
- Fix crash when obtaining the next hop to calculate LFA on LAN links
- Fix memory leaks when the transition of neighbor state from non-UP to DOWN
- Fix crash when displaying asla in json
pimd
- Fix crash in pimd
- Fix msdp setting of sa->rp
- Fix crash on non-existent interface
nhrpd
- Fix sending /32 shortcut
mgmtd
- Don't add implicit state data when reading config from file
- Fix too early daemon detach of mgmtd
ripd
- Fix show run output for distribute-list
lib
- Fix distribute-list deletion
- Fix crash on distribute-list delete
- Fix incorrect use of error checking macro
yang
- Added missed prefix to the yang file
ospfd
- Fix internal ldp-sync state flags when feature is disabled
ldpd
- Fix wrong gtsm count
ripd
- Change the start value of sequence 1 to 0
zebra
- Fix evpn mh bond member proto reinstall
- Fix to avoid two Vrfs with same table ids
- Fix missing static routes
- Ensure non-equal id's are not same nhg's
FRR Release 10.1
We are pleased to announce FRR release 10.1.
FRR 10.1 brings a long list of enhancements and fixes with 601 commits from 58 developers. Thanks to all contributors.
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr:10.1.0
Release Overview
Breaking changes
Enable BGP dynamic capability by default for datacenter profile
Advertise BGP "Dynamic" capability by default if using a datacenter
profile. The dynamic capability gives more flexibility in terms of changing some parameters (e.g. Graceful-Restart, Long-lived Graceful-Restart timers, Addpath, Role, etc.) without resetting the session.
More details here.
Split BGP rpki cache
command into separate per SSH/TCP
The old command is broken at some level. When configuring a TCP session with the source
, the command thinks it's an SSH session with a username.
Add deprecation cycle for OSPF router-info X [A.B.C.D]
command
Features
BGP dampening per-neighbor support
It is now possible to configure BGP dampening parameters on a per-neighbor basis. In previous releases, BGP dampening could only be configured globally or per-SAFI.
More details here.
BMP send-experimental stats
We added an option to send experimental BMP (RFC 7854) stats [65531-65534].
RFC 7854 defines BMP statistics types:
Values 65531 through 65534 are Experimental, and value 65535 is Reserved.
More details here.
Implement extended link-bandwidth for BGP
By default bandwidth in extended communities is encoded in IEEE floating-point format, and is limited to a maximum of 25 Gbps. Since not every vendor implements this correctly (due to IEEE floating-point), another draft is implemented to encode the bandwidth into IPv6 address-specific extended community.
More details here.
Paths Limit for Multiple Paths in BGP
Implemented this draft as an extension for the Addpath capability, that tells the sender to send only an arbitrary number of paths per prefix instead of sending all of the known paths.
More details here.
New command for OSPFv2 ip ospf neighbor-filter NAME [A.B.C.D]
Configure an IP prefix list to filter packets received from OSPF neighbors on the OSPF interface.
More details here.
Implement non-broadcast support for point-to-multipoint networks
This extends non-broadcast support to point-to-multipoint networks.
The AllOSPFRouters
(224.0.0.5
) is still joined for non-broadcast networks since it is joined for NBMA networks.
More details here.
Other significant changes
bgpd
- Fix route leaking from the default l3vrf
- Fix
match peer
when switching between IPv4/IPv6/interface - Fix dynamic peer graceful restart race condition
- Fix colored routes not installed after a switchover
- Fix crash when deleting the SRv6 locator
- Fix
no set as-path prepend ASNUM...
- Fix negative commands for Graceful-Restart operations (avoid entering incorrect state)
- Fix ipv4-mapped ipv6 on non 6pe
- Fix show run of network route-distinguisher
- Fix display when using
missing-as-worst
- Fix
show bgp neighbors
output - Fix error handling for MP/GR capabilities as a dynamic capability
- Fix error handling when receiving BGP Prefix-SID attribute
- Fix route-target display with a dotted format
- Fix
no bgp as-path access-list
- Fix
no
form forneighbor X capability software-version
- Check against extended community unit size for link bandwidth
- Make sure we have enough data to handle extended link bandwidth
- Check if FQDN capability length is in valid ranges
- Allow using different ASNs per VRF instances
- Send End-of-RIB not only if Graceful-Restart capability is received
- Implement backpressure to avoid CPU hog
- Ignore validating the attribute flags if path-attribute is configured
- Prevent deletion of BGP peer groups associated with
bgp listen range
- Inherit some peer flags from the peer-group
- Allow specification of AS 0 for RPKI commands
- Allow using
maximum-prefix
for EVPN - Increase install/uninstall speed of EVPN VNIs
- Update default-originate route-map actual map structure
- Include
unsuppress-map
as a valid outgoing eBGP policy - Allow dynamically disable graceful-restart/long-lived graceful-restart
- Unset advertised capabilities if the capability is disabled
- Aggregated summary-only remove suppressed from EVPN
isisd
- Fix crash when deactivating ISIS adjacency on the interface
- Fix
show isis database [detail] json
- Fix
show isis algorithm
- Fix crash when configuring the circuit type for the interface
- Fix IP/IPv6 reachability TLVs
- When the metric-type is configured as "wide", the IS-IS generates incorrect metric values for IPv4 directly connected routes
- Add link state support for SRv6 adjacencies
- The hold time of hello packets on a P2P link does not match the sending interval
mgmtd
- Implement YANG RPC/action support
ospfd
- Fix crash in OSPF TE parsing
- Fix the bug where ip_ospf_dead-interval_minimal_hello-multiplier did not reset the hello timer
- Fix
no write-multiplier
command - Fix
no maximum-paths
command - Solved crash in RI parsing with OSPF TE
- Assure OSPF AS External routes are installed after the link flap
- Send LS Updates in response to LS Request as unicast
ospf6d
- Handle topo change in Graceful-Restart Helper mode for max-age LSAs
- Prevent heap-buffer-overflow with an unknown type
- Redistribute metric for AS-external route
- Fix next-hop computation for inter-area multi-ABR ECMP
- Fix interface type vs. connected routes updates
pathd
- Retry synchronous label-manager ZAPI connection
pimd
- Fix null register before aging out reg-stop
- Fix dr-priority range
- Fix crash unconfiguring rp keepalive timer
lib
- Fix keychain NB crash
- Do not convert EVPN prefixes into IPv4/IPv6 if not needed
ripd
- Fix
clear ip rip
command
ripngd
- Fix
clear ipv6 ripng
command
tools
- Handle seq num for BGP as-path in frr-reload.py
vtysh
- Fix 'show ip[v6] prefix-list ... json' formatting by moving it to vtysh
- Fix
show route-map
command when calling viado
- Show
ip ospf network ...
even if it's not the same as the interface type
zebra
- Fix
mpls label bind
command - Fix excessive
exit
commands - Fix static SRv6 segment-list SID order
- Fix JSON output for
show route summary json
- Fix malformed json output for multiple vrfs in command
show ip route vrf all json
- Fix crash if MAC-VLAN link in another netns
- Fix crash on MAC-VLAN link down/up
- Deny the routes if ip protocol CLI refers to an undefined route-map
- Bridge flap handle VLAN membership update
- Add
show fpm status [json]
command
Full Changelog: frr-10.0...frr-10.1
FRR Release 9.1.1
Fixed CVEs
Bug Fixes
bgpd
"default-originate" shouldn't withdraw non-default routes
Aggr summary-only suppressed export to evpn
Allow using optional table id for negative `no set table x` command
Arrange peer notification to after zebra announce
Check bgp evpn instance presence in soo
Convert the bgp_advertise_attr->adv to a fifo
Do not show tcp mss if the socket is broken
Ensure bgp does not stop monitoring nexthops
Ensure community data is freed in some cases.
Ensure that the correct aspath is free'd
Fix `match peer` when switching between ipv4/ipv6/interface
Fix `no set as-path prepend asnum...`
Fix bgp_best_selection heap-use-after-free
Fix crash when deleting the srv6 locator
Fix display when using `missing-as-worst`
Fix dynamic peer graceful restart race condition
Fix ecommunity_fill_pbr_action heap-buffer-overflow
Fix error handling when receiving bgp prefix sid attribute
Fix errors handling for mp/gr capabilities as dynamic capability
Fix format overflow for graceful-restart debug logs
Fix logging message when receiving a software version capability
Fix no bgp as-path access-list issue
Fix route-map match probability deconfiguration callback
Fix srv6 memory leak detection
Fix the order of null check and zapi decode
Fix vrf leaking with 'no bgp network import-check
Free memory for srv6 functions and locator chunks
Ignore validating the attribute flags if path-attribute is configured
Include unsuppress-map as a valid outgoing policy
Lttng tp add evpn route events
Make `suppress-fib-pending` clear peering
Note when receiving but not understanding a route notification
Prevent from one more cve triggering this place
Set correct ttl for the dynamic neighbor peers
Update default-originate route-map actual map structure
Revert "Fix pointer arithmetic in bgp snmp module"
doc
Add param range for graceful-restart helper supported-grace-time
Remove duplicated show route-map
isisd
Fix _isis_spftree_del heap-use-after-free
Fix dislaying lsp id
Fix heap-after-free with prefix sid
Fix ip/ipv6 reachability tlvs
lib
Check for not being a blackhole route
Fix show route map json output
Do not convert evpn prefixes into ipv4/ipv6 if not needed
Replace deprecated ares_gethostbyname
Replace deprecated ares_process()
nhrpd
Fix race condition
Fix core dump on shutdown
ospf6d
Ospfv3 route change comparision fixed for asbr-only change
Prevent heap-buffer-overflow with unknown type
ospfd
Add support for "no router-info [<area|as>] command"
Can not delete "segment-routing node-msd" when sr if off
Correct lsa parser which fulfill the ted
Correct opaque lsa extended parser
Correct sid check size
Fix ospf dead-interval minimal hello-multiplier param range
Fix the bug where ip_ospf_dead-interval_minimal_hello-multiplier did not reset hello timer
Protect call to get_edge() in ospf_te.c
Solved crash in ospf te parsing
Solved crash in ri parsing with ospf te
Revert "Fix some dicey pointer arith in snmp module"
pbrd
Fix map seq installed flag in json
Fix pbr handling for last rule deletion
pimd
Fix crash unconfiguring rp keepalive timer
Fix crash when configuring ssmpingd
Fix dr-priority range
Fix null register before aging out reg-stop
Fix order of operations for evaluating join
Re-evaluated s,g oils upon rp changes and for empty sg upstream oils
Fix crash when mixing ssm/any-source joins
staticd
Fix changing to source auto in bfd monitor
tests
Check for 0.0.0.0/1 in bgp_default_route
Check if ibgp session can drop invalid aigp attribute
Extend tests for aspath exclude
Update ospf te topotests
tools
Apply black formatting for tools/frr-reload.py
Fix frr-reload interface desc cmd
Fix frr-reload multiple no description cmds
Fix frr-reload multiple no description cmds
Use error log level when failing to execute commands via frr-reload.py
topotests
Do not check table version
Redispatch tests in bfd_topo3
Test wrong bfd source in bfd_topo3
Vpnv4 route leaking with no import-check
vtysh
Show `ip ospf network ...` even if it's not the same as the interface type
zebra
Add missing whitespace when printing route entry status
Deny the routes if ip protocol cli refers to an undefined rmap
Don't deref vxlan-vni array
Fix crash if macvlan link in another netns
Fix crash on macvlan link down/up
Fix evpn svd based remote nh neigh del
Fix mpls command
Fix route deletion during zebra shutdown
The dplane_fpm_nl return path leaks memory
Full Changelog: frr-9.1...frr-9.1.1
FRR Release 9.0.3
Fixed CVEs
Bug Fixes
bgpd
"default-originate" shouldn't withdraw non-default routes
Arrange peer notification to after zebra announce
Convert the bgp_advertise_attr->adv to a fifo
Ensure community data is freed in some cases.
Ensure that the correct aspath is free'd
Fix `match peer` when switching between ipv4/ipv6/interface
Fix display when using `missing-as-worst`
Fix error handling when receiving bgp prefix sid attribute
Fix format overflow for graceful-restart debug logs
Fix route-map match probability deconfiguration callback
Fix srv6 memory leak detection
Include unsuppress-map as a valid outgoing policy
Note when receiving but not understanding a route notification
Prevent from one more cve triggering this place
Set correct ttl for the dynamic neighbor peers
Update default-originate route-map actual map structure
doc
Add param range for graceful-restart helper supported-grace-time
isisd
Fix dislaying lsp id
Fix heap-after-free with prefix sid
Fix ip/ipv6 reachability tlvs
lib
Check for not being a blackhole route
Do not convert evpn prefixes into ipv4/ipv6 if not needed
Replace deprecated ares_gethostbyname
Replace deprecated ares_process()
nhrpd
Fix nhrp_peer leak
Fix race condition
ospf6d
Ospfv3 route change comparision fixed for asbr-only change
Prevent heap-buffer-overflow with unknown type
ospfd
Add support for "no router-info [<area|as>] command"
Can not delete "segment-routing node-msd" when sr if off
Correct lsa parser which fulfill the ted
Correct opaque lsa extended parser
Correct sid check size
Fix ospf dead-interval minimal hello-multiplier param range
Fix the bug where ip_ospf_dead-interval_minimal_hello-multiplier did not reset hello timer
Protect call to get_edge() in ospf_te.c
Solved crash in ospf te parsing
Solved crash in ri parsing with ospf te
pbrd
Fix map seq installed flag in json
Fix pbr handling for last rule deletion
pimd
Fix crash unconfiguring rp keepalive timer
Fix crash when configuring ssmpingd
Fix dr-priority range
Fix null register before aging out reg-stop
Fix order of operations for evaluating join
Re-evaluated s,g oils upon rp changes and for empty sg upstream oils
Fix crash when mixing ssm/any-source joins
staticd
Fix changing to source auto in bfd monitor
tests
Check for 0.0.0.0/1 in bgp_default_route
Update ospf te topotests
tools
Always append "exit" in frr-reload.py
Apply black formatting for tools/frr-reload.py
Fix frr-reload multiple no description cmds
Fix key chain reload removal
Fix ospf area stub summary in frr-reload
Fix pim interface config deletion
Use error log level when failing to execute commands via frr-reload.py
topotests
Redispatch tests in bfd_topo3
Test wrong bfd source in bfd_topo3
vtysh
Show `ip ospf network ...` even if it's not the same as the interface type
zebra
Add missing whitespace when printing route entry status
Deny the routes if ip protocol cli refers to an undefined rmap
Fix crash if macvlan link in another netns
Fix crash on macvlan link down/up
Fix nhg out of sync between zebra and kernel
The dplane_fpm_nl return path leaks memory
Full Changelog: frr-9.0.2...frr-9.0.3