Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Fedora 44 frr Denial of Service Security Advisory 2026-28949d21e5

fedora
Calendar Grey June 23, 2026
Dist Fedora Esm H88
New frr version for Fedora 44 fixes critical DoS issues and improves routing protocol handling.
New version of frr and grout

Summary

FRRouting is free software that manages TCP/IP based routing protocols. It takes

a multi-server and multi-threaded approach to resolve the current complexity

of the Internet.

FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR,

EIGRP and BFD.

FRRouting is a fork of Quagga.

Update Information:

New version of frr and grout. I am keeping libyang to version 3 at the moment due to recommendations from https://github.com/FRRouting/frr/blob/master/doc/developer/building-libyang.rst. Once changes to build with libyang5 land, I will rebase libyang as well.

Topics%20covered

Topics Covered

security advisory denial of service fedora update CVE frr

Change Log

* Tue Jun 9 2026 Michal Ruprich - 10.6.1-1 - New version 10.6.1

References


[ 1 ] Bug #2413655 - frr-10.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2413655 [ 2 ] Bug #2468134 - CVE-2026-37457 frr: denial of service via crafted FlowSpec component [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2468134 [ 3 ] Bug #2468135 - CVE-2026-37458 frr: denial of service via crafted UPDATE message [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2468135 [ 4 ] Bug #2468136 - CVE-2026-37459 frr: denial of service via crafted BGP UPDATE message [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2468136 [ 5 ] Bug #2487832 - grout-0.16.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2487832

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-28949d21e5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: frr
Product: Fedora 44
Version: 10.6.1
Release: 1.fc44
URL: http://www.frrouting.org
Summary: Routing daemon

Topics%20covered

Topics Covered

security advisory denial of service fedora update CVE frr

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here