frr-7.5.1-25.el8_10

エラータID: AXSA:2026-1459:04

Release date: 
Wednesday, August 5, 2026 - 17:35
Subject: 
frr-7.5.1-25.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

* frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-37460
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

Solution: 

Update packages.

CVEs: 
CVE-2026-37460
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
Additional Info: 

N/A

Download: 

SRPMS
  1. frr-7.5.1-25.el8_10.src.rpm
    MD5: 6a9097071edb654c1ced89a651af590d
    SHA-256: 6371bd8727bbab05f4758aae09157b85c045f198ace7b8a3d7a4377a195e407c
    Size: 6.44 MB

Asianux Server 8 for x86_64
  1. frr-7.5.1-25.el8_10.x86_64.rpm
    MD5: fa025d537a6ee002e0a97bfed5316e17
    SHA-256: 9d9c53389111e2396eb88b492cd4bf92eecf8d1d7f2b6310ed7e22402c234dba
    Size: 3.15 MB
  2. frr-selinux-7.5.1-25.el8_10.noarch.rpm
    MD5: c6942fdd953a4d293f1331a5c88c5afc
    SHA-256: 0bb0cd03fe5d300187bbcb66e0f5092080389b123b70e9f743869896e8859f70
    Size: 26.86 kB