FRRouting Routing daemon

Edit Package frr

FRR is free software which manages TCP/IP based routing protocols.
It supports BGP4, BGP4+, OSPFv2, OSPFv3, IS-IS, RIPv1, RIPv2, RIPng,
PIM and LDP as well as the IPv6 versions of these.

FRR is a fork of Quagga..

Refresh
Refresh
Source Files
Filename Size Changed
0001-disable-zmq-test.patch 0000000874 874 Bytes
0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch 0000003356 3.28 KB
0004-tools-remove-backslash-from-declare-check-regex.patch 0000001118 1.09 KB
0005-root-ok-in-account-frr.pam.patch 0000001194 1.17 KB
0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch 0000001816 1.77 KB
0007-bgpd-Ensure-stream-received-has-enough-data.patch 0000005425 5.3 KB
0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch 0000001073 1.05 KB
0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch 0000004270 4.17 KB
0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch 0000004422 4.32 KB
0011-babeld-fix-11808-to-avoid-infinite-loops.patch 0000001742 1.7 KB
0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch 0000001271 1.24 KB
0013-bgpd-Check-mandatory-attributes-more-carefully-for-U.patch 0000004517 4.41 KB
0014-bgpd-Handle-MP_REACH_NLRI-malformed-packets-with-ses.patch 0000003911 3.82 KB
0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch 0000003736 3.65 KB
0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch 0000003635 3.55 KB
0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch 0000001967 1.92 KB
0018-bgpd-Flowspec-overflow-issue.patch 0000001282 1.25 KB
frr-8.4.tar.gz 0009883194 9.43 MB
frr-tmpfiles.d 0000000039 39 Bytes
frr.changes 0000018118 17.7 KB
frr.spec 0000015692 15.3 KB
harden_frr.service.patch 0000001267 1.24 KB
Revision 57 (latest revision is 68)
Marcus Meissner's avatar Marcus Meissner (msmeissn) accepted request 1130736 from Marius Tomaschewski's avatar Marius Tomaschewski (mtomaschewski) (revision 57)
- Apply upstream fix for a crash on malformed BGP UPDATE message
  with an EOR, because the presence of EOR does not lead to a
  treat-as-withdraw outcome (CVE-2023-47235,1216896,https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b)
  [+ 0015-bgpd-Treat-EOR-as-withdrawn-to-avoid-unwanted-handli.patch]
- Apply upstream fix for a crash on crafted BGP UPDATE message with
  a MP_UNREACH_NLRI attribute and additional NLRI data (CVE-2023-47234,
  bsc#1216897,ttps://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf)
  [+ 0016-bgpd-Ignore-handling-NLRIs-if-we-received-MP_UNREACH.patch]
- Apply upstream fix for attempts to read beyond the end of the
  stream during labeled unicast parsing (CVE-2023-38407,bsc#1216899,https://github.com/FRRouting/frr/pull/12956/commits/ab362eae68edec12c175d9bc488bcc3f8b73d36f)
  [+ 0017-bgpd-Fix-use-beyond-end-of-stream-of-labeled-unicast.patch]
- Apply upstream fix for an nlri length of zero mishandling, aka
  "flowspec overflow" (CVE-2023-38406,bsc#1216900,https://github.com/FRRouting/frr/pull/12884/commits/0b999c886e241c52bd1f7ef0066700e4b618ebb3)
  [+ 0018-bgpd-Flowspec-overflow-issue.patch]
Comments 3


Erico Mendonca's avatar

oops, mininet is in the same project, disregard that.


Matthew Oliver's avatar

Just and FYI, I needed to install libyang-extentions in order to start frr (with ripng enabled, if that changes things) on OpenSuse Leap 15.1. Thought I'd mention it in case it means we need to add another runtime dep.

openSUSE Build Service is sponsored by