From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bQlQr1Y7tz32yq for ; Mon, 23 Jun 2025 10:57:24 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bQlQm4tcbz2xSN for ; Mon, 23 Jun 2025 10:57:20 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4bQlQl39Rhz2gF; Mon, 23 Jun 2025 10:57:19 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1750676239; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=QaazyTw6TXezbaZijRnmuHcKr+FdNIMgqHcnFFArAko=; b=WQvE15+sQ0yviG03NVLVCZ+2UkZzqlI035sijO83IAwx1tbnJVLSwje0QSuQYVBfeIvcyv +Azke+C5/ihbIlCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1750676239; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=QaazyTw6TXezbaZijRnmuHcKr+FdNIMgqHcnFFArAko=; b=AoSMv2PXvjTGHmUE84F+DM8DsCagEunu4DO36gpD6w/F7CWBhxBEbJ4vZYrSsa6VoF3/EW b1NvxKjOiUnpmjzJN6qC/mtNvbKb/k0jrJGCDc9CWu1jBzMwoOPU/PD2/spypDHFpBjvuJ q/2ax3h+U6SgN4wJhQO+8jOc+TQyUrFUqqdo7crzNUSMwtihsJcWNaC4oGxTOzwx3IGPIA ck/hKDqByzCEgolihMAG4gAM0aSlKqJ0mr7Gzl2+VxRPq3COLt8ibu7bcaqU90kYhp3Z9t Ayx4JtZZ4tHjlg25EYpQpIQYF7HnMyaV1NqZ6f1f5vNJlRPz2JHAFSwY+QbE3Q== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] frr: Update to version 10.3.1 Date: Mon, 23 Jun 2025 12:57:16 +0200 Message-ID: <20250623105716.3306586-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Update from version 10.2.1 to 10.3.1 - Update of rootfile - CVE fix in 10.3.0 - Changelog 10.3.1 Bug Fixes babeld Check valid babel port Fix incorrect type assignment in parse_request_subtlv bgpd Fix set evpn gateway-ip ipv[46] route-map Fix bmp heap use after free on non connected session Fix evpn attributes being dropped on input Fix holdtime not working properly when busy Fix leaked memory when showing some bgp routes Fixed crash upon bgp network import-check command On shutdown free up memory leak found by topotest Prevent crash when issuing a show rpki connections Remove unused defines from bgp_label.h Retain the routes if we do a clear with n-bit set for graceful-restart Set the label for mp_unreach_nlri 0x800000 instead of 0x000000 Treat the peer as not active due to bfd down only if established isisd Fix srv6_sid memory leak lib Create vrf if needed Return duplicate ipv6 prefix-list entry test Return duplicate prefix-list entry test nhrpd Add hop count validation before forwarding in nhrp_peer_recv() ospf6d Disable and delete ospfv3 areas that no longer have interfaces or configuration. Fix lsa memory leaks related to graceful restart pimd Fix for crash during networking restart Fix memory leak on shutdown Initialize gm proxy to false staticd Avoid requesting srv6 sid from zebra when loc and sid block dont match Fix crash that occurs when modifying an srv6 sid tools Fix reload script for srv6 locators and formats zebrad Do not flush an existing vni configuration trying to remove wrong vni Ensure proper return for failure for sid allocation Fixes allowing srv6 func-bits length 0 10.3.0 New Features Highlight: Lua 5.4 support Fixed CVE-2024-55553 New match community-count BGP command to limit communities count New set metric igp|aigp BGP command to inject IGP metric as MED into BGP New bgp ipv6-auto-ra BGP command Optimize BGP EVPN L2VNI/L3VIN remote routes processing Respect non-transitive BGP extended communities between direct peers Drop deprecated bgp network import-check exact command Handle BGP ENHE (Extended Next Hop Encoding) capability via dynamic capability Implement BGP connect backoff retry Implement an ability to import BMP information from a separate BGP instance Add support of BGP color extended community color-only types Implement SBFD Add support for SRv6 static SIDs Implement embedded-rp for PIMv6 Implement AutoRP mapping-agent for PIM Implement MSDP peer SA limiting What's Changed zebra: Fix crash in pw code by @donaldsharp in #17042 bfdd, yang: change bfd timer and multiplier values by @louis-6wind in #17002 Adds note about VRRP issues inside a VM with underlying bridge networking by @chriswiggins in #17050 tools: Add missing mgmtd into logrotate/rsyslogd by @ton31337 in #17054 isisd: Lsp fragments will delete the corresponding dyn_cache entry. by @baozhen-H3C in #17044 bgpd: Allow specification of vrf in show bgp neighbor graceful-restart by @donaldsharp in #17057 bgpd: changes for code maintainability by @sri-mohan1 in #17040 10.3 dev deb/rpm housekeeping by @Jafaral in #17061 bgpd: fix ipv6 nexthop-local unchanged by @louis-6wind in #17037 doc: routemap: fix typos by @rudis in #17064 bgpd: Move some non BGP-specific route-map functions to lib by @ton31337 in #17059 bgpd: split nexthop-local unchanged peer subgroup by @louis-6wind in #17071 zebra: add back one field for debug by @anlancs in #17082 zebra: Only notify dplane work pthread when needed by @donaldsharp in #17062 bgpd: fix evpn mh esi down by @chiragshah6 in #17074 doc: clarify bgp as-override by @louis-6wind in #17087 bgpd: bmp loc-rib peer up/down for vrfs by @louis-6wind in #17001 zebra: vlan to dplane by @raja-rajasekar in #16737 bgpd: Remove unused BGP_NEXTHOP_CONNECTED_CHANGED flag for nexthop by @ton31337 in #17099 bgpd: Check if su_local/su_remote exist before encoding BMP peer state by @ton31337 in #17103 bgpd: fix route selection with AIGP by @enkechen-panw in #17093 bgpd: Drop deprecated bgp network import-check exact command by @ton31337 in #17053 lib: Apply and generate route-map commands earlier before any other protocol by @ton31337 in #17058 isisd: Remove circuit state check for openfabric by @ton31337 in #17083 ospfd: fix the bug that the empty area was not free after no_area_range was executed by @Shbinging in #17101 bgpd: fix bmp coverity issue 1600779 by @louis-6wind in #17106 tools/gcc-plugins: don't crash on array parameters by @eqvinox in #17104 bgpd, tests: don't send local nexthop from rr client by @louis-6wind in #17073 zebra: Prevent a kernel route from being there when a connected should by @donaldsharp in #17088 zebra: Attempt to explain the rnh tracking code better by @donaldsharp in #15586 bgpd: Derive and set MED from IGP or AIGP by @ton31337 in #17038 tests: iproute2_check_path_selection call the actual command by @donaldsharp in #17107 ospfd: Fixup ospf_lsa.[ch] to properly spell out parameters for funct… by @donaldsharp in #17126 zebra: unlock node only after operation in zebra_free_rnh() by @enkechen-panw in #17116 vtysh: fix SA warning, no need to call getenv() twice by @Jafaral in #17114 bgpd: Implement match src-peer ... command by @ton31337 in #16946 zebra: fix heap-use-after free on ns shutdown by @pguibert6WIND in #17020 *: Fix up improper handling of nexthops for nexthop tracking by @donaldsharp in #17076 lib, test: fix display ipv4 mapped ipv6 addresses by @louis-6wind in #16452 bgpd: fix several issues in sourcing AIGP attribute by @enkechen-panw in #17091 ospfd: fix some ospf commands by @Shbinging in #17065 *: fix clang-19 SA by @eqvinox in #17136 zebra: Fix possible null deref discovered by coverity by @donaldsharp in #17154 ospfd: update ospf_asbr_status when using no_area_nssa command by @Shbinging in #17134 lib: Correctly handle ppoll pfds.events == 0 by @donaldsharp in #17025 bgpd: changes for code maintainability by @sri-mohan1 in #17164 bgpd: changes for code maintainability by @sri-mohan1 in #17167 tests: logger masked in topotest.py by @liambrady in #17157 bgpd: allow value 0 in aigp-metric setting by @enkechen-panw in #17169 doc: Require unified config for all new topotests by @ton31337 in #17172 bgpd: fix AIGP calculation in route advertisement by @enkechen-panw in #17168 bgpd: Handle non-transitive extended communities by @ton31337 in #17151 bgpd: Do not filter no-export community for BGP OAD by @ton31337 in #17165 zebra: remove useless code by @anlancs in #17166 isisd: fix 'show isis route' and 'show isis fast-reroute summary' errors with vrf by @baozhen-H3C in #17174 zebra: drop NEWLINK event handling in the main thread by @anlancs in #17180 bgpd: Do not leak a stream with bmp code by @donaldsharp in #17192 Revert "lib: Attach stdout to child only if --log=stdout and stdout F… by @donaldsharp in #17198 ospfd:fix the bug that the empty area was not free after no area range command was executed by @Shbinging in #17183 zebra: fix showing nexthop vrf for ipv6 blackhole by @louis-6wind in #17162 bgpd: fix uninitialized bgp_labels by @louis-6wind in #17191 lib: debug memstats-at-exit improvements by @eqvinox in #17155 pimd: PIM autorp no path RP fix by @nabahr in #17215 Optimizations and problem fixing for large scale ecmp from bgp by @donaldsharp in #17229 tests: add bmpserver logging by @louis-6wind in #17207 bgpd: compare aigp after local route check in bgp_path_info_cmp() by @enkechen-panw in #17199 docs: Update evpn.rst by @systemcrash in #17255 pimd, tests: fix bsr assert and expand topotest to pimv6 by @Jafaral in #17216 lib, zebra: Keep zebra on-rib-process script in frr.conf by @ton31337 in #17160 isisd: fix change flex-algorithm number from uint32 to uint8 by @pguibert6WIND in #17250 bgpd: add bgp ipv6-auto-ra command by @Sokolmish in #16354 bgpd: fix display of local label in show bgp by @louis-6wind in #17243 vtysh: fix find and list commands by @eqvinox in #17200 Mrib nht wonky by @donaldsharp in #17254 zebra: add 'debug zebra srv6' command by @pguibert6WIND in #17257 ospfd:fix syntax of some ospf no commands by @Shbinging in #17189 bgpd: fix blank line in running-config with bmp listener cmd by @pguibert6WIND in #17278 bgpd: fix crash when polling bgp4v2PathAttrTable by @fdumontet6WIND in #17245 bgpd: fix prefix same as nexthop in label per nexthop by @lsang6WIND in #16990 isisd: The command "'show isis vrf all summary json" has no output. by @baozhen-H3C in #17190 tests: fix bmp tests random failure by @louis-6wind in #17226 bgpd: bestpath failure when you have a singlepath not in holddown by @donaldsharp in #17251 Bgp musings by @donaldsharp in #15563 doc: Use RST, not Markdown format for links by @ton31337 in #17311 doc: Create html_context before setting READTHEDOCS by @ton31337 in #17310 tests: respect RLIMIT_CORE hard limit by @liambrady in #17296 zebra: Add missing new line for help string by @ton31337 in #17318 tests: Add an ability to specify daemon params with unified config by @ton31337 in #17317 Add support to import alternate URIB tables into the main MRIB by @nabahr in #17281 Bgp update optimizations by @donaldsharp in #17327 Revert "ospfd: update ospf_asbr_status when using no_area_nssa command" by @donaldsharp in #17330 lib: Remove wheel name it is no longer used by @donaldsharp in #17329 tests: Do not set by default netlink receive buffer size for Zebra by @ton31337 in #17328 Clang 19 some more by @donaldsharp in #17230 ospfd: Fix opaque LSA refresh interval and modify LSA cmds. by @aceelindem in #17194 Remove event master free unused by @donaldsharp in #17280 Remove in6addr cmp by @donaldsharp in #17312 bgpd: Replace 128 with IPV6_MAX_BITLEN by @cscarpitta in #17335 zebra: Fix incorrect debug macros by @cscarpitta in #17334 doc: Fix a couple of misspellings in zebra documentation by @cscarpitta in #17333 tests: Remove unnecessary fields from expected JSON by @nabahr in #17332 zebra: On startup actually allow for nhe's to be early by @donaldsharp in #16960 nhrpd: fix passphrase handling, add topotest for resolution request by @jmuthiilabn in #17115 zebra: Don't display the vrf if not using namespace based vrfs by @donaldsharp in #16750 bgpd: Treat numbered community-list only if it's in a range 1-500 by @ton31337 in #17305 ospfd: Use router_id what Zebra has if we remove a static router_id by @ton31337 in #17319 zebra: fix missing kernel routes by @anlancs in #17326 ospfd: Fix assert in LSA refresh interval setting by @aceelindem in #17346 ospf6d: remove redundant null ptr check in ospf6_link_lsa_get_prefix_str() - CID 1599957 in #17364 ospf6d: remove redundant null ptr check in #17363 tests: Add a topology that supports a large number of ecmp by @donaldsharp in #17244 bgpd: Clear stale routes with multiple paths by @ton31337 in #17376 lib: Add ability to track time in individual routemaps by @donaldsharp in #12109 bgpd:support of color extended community color-only types by @guoguojia2021 in #17231 bgpd:support tcp-mss for neighbor group by @zice312963205 in #17341 Bgp withdraw and unlikely by @donaldsharp in #17384 lib: Initialize mbefore for route_map_apply_ext() by @ton31337 in #17386 bgpd: Fix for match source-protocol in route-map for redistribute cmd by @raja-rajasekar in #17362 bgpd: fix resolvedPrefix in show nexthop json output by @krishna-samy in #17409 bgpd: Reset BGP session only if it was a real BFD DOWN event by @ton31337 in #17344 isisd: fix crash when switching P2P after shutdowning LAN circuit by @baozhen-H3C in #17366 Add two RFCs for BGP to the list by @ton31337 in #17374 BGP BFD session things by @ton31337 in #17410 tests: clarify bgp_vpnv4_asbr by @louis-6wind in #17368 zebra, lib: use internal rbtree for per-NS tree of ifps by @mjstapp in #17297 debian: Add missing libprotobuf-dev to grpc profile by @piotrjurkiewicz in #17205 tests: add support for ospf instances with unified configs by @Jafaral in #17331 bgpd: Show neighbor advertised paths including addpath by @ton31337 in #17423 zebra: fix unguarded debug in evpn code by @mjstapp in #17426 bgpd: Fix color extended community parsing by @ton31337 in #17422 bgpd: Drop unsupported commands by @ton31337 in #17429 Zebra debug assert by @donaldsharp in #17433 bgpd: Fix color extended community parsing by @ton31337 in #17434 bgpd : backpressure - Fix to pop items off zebra_announce FIFO for few EVPN triggers by @raja-rajasekar in #17432 pim6d: support embedded-rp by @rzalamena in #16937 bgpd: Validate both nexthop information (NEXTHOP and NLRI) by @ton31337 in #17435 bgpd: Add more details to ebgp requires policy warning by @ton31337 in #17427 accords: guidelines/terms for FRRouting trademarks by @eqvinox in #17193 sharpd: Fix a few typos in CLI help messages by @cscarpitta in #17444 sharpd: Convert numeric 128 into IPV6_MAX_BITLEN for prefixlen by @cscarpitta in #17445 bgpd: Optimize the outbound path if RFC8212 is applied by @ton31337 in #17451 packaging: Use PCRE2 for .deb/.rpm builds by @ton31337 in #17375 bgpd: Optimize the way parsing communities if no community alias exists by @ton31337 in #17457 Lua casting by @ton31337 in #17456 pim6d: fix coverity scan warning by @rzalamena in #17455 tools: Fix syntax raw parsing for make-foobar helper by @ton31337 in #17453 isisd: properly display srv6 algorithm by @dmytroshytyi-6WIND in #17414 *: remove remaining strncpy() users by @eqvinox in #17156 bfdd: retain remote dplane client socket by @mjstapp in #17464 pimd: two small improvements by @rzalamena in #17468 ospfd: OSPF multi-instance default origination fixes by @aceelindem in #17436 Support bundle isis by @donaldsharp in #17476 pimd: MSDP logging improvements by @rzalamena in #17469 PIMD: Implement AutoRP mapping-agent by @nabahr in #17340 Bgp bfd and its ilk by @donaldsharp in #17473 tests: Ensure connected routes are installed before continuing by @donaldsharp in #17477 tools: Add pim show commands to support bundle by @csiltala in #17484 bgpd: Do not reset peers on suppress-fib toggling by @ton31337 in #17487 lib, zebra: Do not have duplicate memory type problems by @donaldsharp in #17492 tools: Add missing keywords in frr-reload by @cscarpitta in #17493 bgpd: Disable sending ROV extended community by default by @ton31337 in #17459 ospfd: Correct invalid SR-MPLS output label by @odd22 in #17495 tools: Add missing keyword encapsulation in frr-reload by @cscarpitta in #17498 tests: add bgp_vpnv4_route_leak_basic by @louis-6wind in #17369 Fix docker image for topotests by @ton31337 in #17509 bgpd: fix version attribute is an int, not a string by @pguibert6WIND in #17506 zebra: avoid a race during FPM dplane plugin shutdown by @mjstapp in #17504 bfdd: disable echo socket when not using it by @rzalamena in #16987 isisd: When the ISIS types of the routers do not match on a P2P link, the neighbor status remains UP by @zhou-run in #17219 two test cleanups by @donaldsharp in #14367 bgpd: Fix Graceful-Restart for peer-groups by @ton31337 in #17501 zebra: fix EVPN check vxlan oper up in vlan mapping by @chiragshah6 in #17483 bgpd: fix use single whitespace when displaying flowspec entries by @pguibert6WIND in #17510 Add some test cases, and some ability to see what is going on in zebra by @donaldsharp in #16878 More found connection conversion issues by @donaldsharp in #17385 zebra: EVPN fix code style in vlan vni map debugs by @chiragshah6 in #17519 doc:Fix bgp doc warning by @guoguojia2021 in #17527 bgpd: fix use real SID in BGP nexthop tracking by @pguibert6WIND in #15542 Docker: Add the ability to override the FRR UID during docker creation by @mikemallin in #17520 Bgp evpn rt5 routemap by @pguibert6WIND in #17491 nhrpd: fix show ip nhrp output by @louis-6wind in #16700 topotests: Allow runing under both docker and podman by @famfo in #17525 BMP test rework by @pguibert6WIND in #17306 Some cleanups by @donaldsharp in #17547 bgpd: Use peer group's member for BGP notify instead of the peer-group by @ton31337 in #17528 bgpd: Fix remote-as with peer-group by @ton31337 in #17542 zebra: separate zebra ZAPI server open and accept by @mjstapp in #17313 pimd: Fix access-list memory leak in pimd by @csiltala in #17518 lib: Fix session re-establishment by @donaldsharp in #17558 Fix bsd sockopt problem by @donaldsharp in #17571 lib: Print the reason why the route-map and/or the index parsing is done by @ton31337 in #17556 pimd: igmp proxy joins should not be written as part of config by @btrent98 in #17569 pimd: Prevent crash of pim when auto-rp's socket is not initialized by @donaldsharp in #17578 pimd: implement MSDP shutdown command by @rzalamena in #17502 lib: Speed up reconnection attempts for zapi by @donaldsharp in #17585 bgpd: fix unconfigure asdot neighbor by @pguibert6WIND in #17582 pimd: free igmp proxy joins on interface deletion by @btrent98 in #17570 Bfd shared network by @donaldsharp in #17600 Timer connect bgp vrf netns by @donaldsharp in #17579 bgpd: fix peer up message for loc-rib not sent by @pguibert6WIND in #17545 bgpd: Check if as_type is not specified when peer is a peer-group member by @ton31337 in #17603 doc: remove no-op "netns NAMESPACE" command from the docs by @idryzhov in #17538 zebra: use macro for one check by @anlancs in #17589 pimd: Extend multicast boundary/ACL functionality by @csiltala in #17461 bgpd: Import allowed routes with self AS if desired by @ton31337 in #17608 bgpd: Show which route-map is used when the prefix is filtered by route-map by @ton31337 in #17575 pimd: MSDP per peer SA limit by @rzalamena in #17521 bgpd: Fix bgp core with a possible Intf delete by @raja-rajasekar in #17624 BMP Peer Distinguisher support by @pguibert6WIND in #17555 Upstream some internal code by @donaldsharp in #17605 bgpd: Show which prefix is suppressed if debug out is enabled by @ton31337 in #17637 zebra: Remove tests for allocation failure by @donaldsharp in #17638 pimd: clean up MSDP code by @rzalamena in #17636 pimd: MSDP originador ID configuration by @rzalamena in #17622 bgpd: When calling bgp_process, prevent infinite loop by @donaldsharp in #17641 doc: Update the next release dates by @ton31337 in #17640 pim6d: fix crash on clear ipv6 mroute by @rzalamena in #17635 pimd,pim6d: optimize multicast prefix generation and fix coverity scan defect by @rzalamena in #17642 zebra: Give a bit more data about zclient connection on errors by @donaldsharp in #17646 tools: Add rip support bundle commands by @donaldsharp in #17645 Fix PIMD RPF lookup mode and nexthop tracking by @nabahr in #17252 bgpd: fix missing addpath withdrawal race condition by @louis-6wind in #16830 EVPN L2VNI/L3VNI Optimize inline Global walk for remote route installations by @raja-rajasekar in #17526 zebra: fix wrong nexthop status for kernel routes by @anlancs in #17544 lib: Take ge/le into consideration when checking the prefix with the prefix-list by @ton31337 in #17615 bgpd: Fix evpn bestpath calculation when path is not established by @donaldsharp in #17613 vlan-subif isis neigbor by @JosiahMg in #16488 bgpd: remove unneeded printfrr reg for pRN by @mjstapp in #17654 bgpd: Connect retry timer backoff by @ton31337 in #17599 tests: add a test case for static route propagation by @Jafaral in #17671 bgpd: Fix memory leak when creating BMP connection with a source interface by @ton31337 in #17675 bgpd: Validate only affected RPKI prefixes instead of a full RIB by @ton31337 in #17586 bgpd: add rpki json attributes to bgp path by @pguibert6WIND in #17670 pim: handle return code to fix a couple of coverity issues by @Jafaral in #17673 bgpd: fix memory leak when reconfiguring a route distinguisher by @pguibert6WIND in #17669 Fix 2 darr (dynamic-array) bugs by @choppsv1 in #17648 test: fix label ordering on error diff report by @choppsv1 in #17676 babel: Clean babel config on babel daemon stop by @ykholod in #17685 bgpd: add meta queue in bgp by @donaldsharp in #17619 lib: Fix to optimize the time taken while batching huge configs by @raja-rajasekar in #17672 bgpd: Fix show neighbor X advertised-routes detail by @ton31337 in #17674 mgmtd: fix compile error by @anlancs in #17704 doc: Fix SRv6 locator documentation by @cscarpitta in #17703 bgpd: Fix enforce-first-as per peer-group removal by @ton31337 in #17705 bgpd: Convert 16 to IPV6_MAX_BYTELEN by @cscarpitta in #17706 bgpd, lib: Use frrstr_time() when using ctime_r() by @ton31337 in #17684 zebra: Remove tests for srv6_locator_alloc failure by @cscarpitta in #17711 BGP Labelpool : Releasing the label in labelpool when VPN session gets removed by @varuntumbe in #17580 tests: enable test failure detection and fix resulting failures by @choppsv1 in #17647 tests: Fix markers in srv6_static_route topotest by @cscarpitta in #17718 isisd: fix srv6 exit statements by @jvoss in #17720 bgpd: Show prefix-related stats per neighbor by @ton31337 in #17734 tools: Add missing formats keyword to segment-routing in frr-reload by @jvoss in #17719 zebra: Fix resetting valid flags for NHG dependents by @raja-rajasekar in #17731 bgpd: add rpki current state by @dmytroshytyi-6WIND in #17728 bgpd: Clean address-family config on daemon restart by @ykholod in #17716 staticd: Reduce the frequency of adding routes by @guoguojia2021 in #17726 zebra:check DAD freeze action before notifying bgp by @chiragshah6 in #17737 isisd: Show correct level information for show isis interface detail json by @ton31337 in #17732 ospfd: Correct one word by @anlancs in #17762 babel: Clean babel related config on daemon stop by @ykholod in #17715 tools: Add missing rpki keyword to vrf in frr-reload by @jvoss in #17750 zebra: fix dpdk compilation error by @raja-rajasekar in #17752 bgpd: Use unique value for BGP_NEXTHOP_EVPN_INCOMPLETE flag by @ton31337 in #17770 bgpd: fix a bug in peer_allowas_in_set() by @enkechen-panw in #17780 bgpd: show json output changes to optimize various show commands by @krishna-samy in #17431 zebra: Fix ip protocol route-map issue. by @sougata-github-nvidia in #17474 bgpd: Withdraw routes without waiting for the coalescing timer to expire by @ton31337 in #17667 ospfd: fix wrong check for two commands by @anlancs in #17779 doc: fix building for alpine package path by @famfo in #17774 tests: improve test reliability by @choppsv1 in #17773 bgpd: Show ifindex for every BGP nexthop cache entry by @ton31337 in #17771 BMP handling of BGP configuration changes by @pguibert6WIND in #17733 ospfclient: fix crash due to streamwriter garbage collect by @Andrew-Dickinson in #17700 bgpd: Respect bgp bestpath missing-as-worst for table-map as well by @ton31337 in #17723 isisd: Allow full no form for domain-password and area-password by @ton31337 in #17725 Add new oper state get callback by @choppsv1 in #17783 New YANG notify msg fmt by @choppsv1 in #17782 fix xpath query on keyless list with positional predicate by @choppsv1 in #17781 improve error handling of operational state walk callback by @choppsv1 in #17772 tests: cleanup ospf6 ecmp inter area by @gromit1811 in #17707 bgpd: add a debug command for route aggregation by @enkechen-panw in #17778 lib: Fix privs syscaps (pset_t) allocation by @gromit1811 in #17795 libs: remove deprecated 'clear thread' cli by @mjstapp in #17798 lib: remove interface dead code by @louis-6wind in #17808 bgpd: fix crash in displaying json orf prefix-list by @louis-6wind in #17807 bgpd: apply route-map for aggregate before attribute comparison by @enkechen-panw in #17801 zebra: Fix leaked nhe by @donaldsharp in #17809 2 test fixes by @donaldsharp in #17805 ospf6d: guard a couple of debugs by @Jafaral in #17831 bgpd: fix memory leak in bgp_aggregate_install() by @enkechen-panw in #17811 bgpd: Fix showing default timers bgp x y by @ton31337 in #17830 bgpd: use igpmetric in bgp_aigp_metric_total() by @enkechen-panw in #17813 tests: avoid nondeterministic route by @Jafaral in #17829 tests: update munet to 0.15.3 by @choppsv1 in #17844 zebra: Optimize invoking nhg compare func by @raja-rajasekar in #17839 Add Ubuntu 24.04 docker image and developer build doc by @choppsv1 in #17843 tools: fix frr-reload for nbr deletion of no form cmds by @chiragshah6 in #17847 tests: remove unnecessary wildcard fields from pim acl test by @Jafaral in #17840 Ability to import BMP information from a separate BGP instance by @pguibert6WIND in #17639 doc: fix LaTex warnings, add documentation to build docs by @Jafaral in #17846 bgpd: remove unused safi in bgp_aggregate structure by @enkechen-panw in #17842 bgpd: fix churn of aggregate routes from duplicate config by @enkechen-panw in #17837 Lua 5.4 support by @ton31337 in #17806 ospfd: avoid the redundant timers by @anlancs in #17803 bgpd: Respect allowas-in value from the source VRF's peer by @ton31337 in #17800 pimd: fix BSR RPs timing out by @Jafaral in #17841 pimd: always write cand-rp group config even when rp is inactive by @Jafaral in #17850 zebra: avoid race between FPM pthread and zebra main pthread in netlink encode/decode by @mjstapp in #17581 operational-state (datastore) change notifications by @choppsv1 in #17796 bgpd: move bgp_aggregate_increment() after bgp_path_info_add() by @enkechen-panw in #17858 Active routes are active by @donaldsharp in #17859 bgpd: remove unused BATTR_REFLECTED for rmap_change_flags by @enkechen-panw in #17854 PIMD: RPF lookup mode per-group, per-source by @nabahr in #17776 mgmtd backend yang model (depends on #17796) by @choppsv1 in #17799 bgpd: Handle ENHE capability via dynamic capability by @ton31337 in #17855 Bgp connect refactor by @donaldsharp in #17810 topotests: improve test reliability by @rzalamena in #17838 ldp snmp/grpc test fix by @choppsv1 in #17862 lib: introduce global -w option for VRF netns backend by @idryzhov in #17727 limit community list count by @pguibert6WIND in #17836 zebra: Uninstall NHG in some situations by @donaldsharp in #17814 tests: ci: add ARM to docker based CI test by @choppsv1 in #17880 Handle datastore notifications correctly in backend clients (daemons) by @choppsv1 in #17876 lib: fix dnode_create to use correct libyang function. by @choppsv1 in #17884 staticd: Add support for SRv6 Static SIDs by @Yubin-Li in #16894 tools: fix regression in gen_northbound_callback tool by @choppsv1 in #17885 Bgp unnumbered interface json by @pguibert6WIND in #17874 small mgmtd-dev doc update and yanglint cleanup by @choppsv1 in #17882 tests: Fix test_bgp_dynamic_capability_enhe topotest by @ton31337 in #17883 tools: fix reload interface deletion by @jklaiber in #16723 bgpd: Fix for local interface MAC cache issue in 'bgp mac hash' table by @krishna-samy in #17888 Fix Rocky 8 RPMs, add options to build without rpki and docs (default is to include) by @louberger in #17793 lib: fix coverity use after free issue: CID 1620101 by @choppsv1 in #17895 bgpd: fix do not send twice peer up/down messages by @pguibert6WIND in #17894 tests: remove table version check in bgp rpki topo1 by @louis-6wind in #17889 bgpd: fix evpn path info get api by @chiragshah6 in #17899 bgpd: fix bfd with update-source in peer-group by @louis-6wind in #17904 bgpd, tests: bgp_evpn_rt5, add test with match evpn vni command by @pguibert6WIND in #17652 zebra: Return error if v6 prefix is passed to show ip route by @Pdoijode in #17898 bgpd: Fix bgp peer solo option by @askorichenko in #17911 redhat: Specify minimum libyang version requirement by @mwinter-osr in #17912 isisd: fix duplicate rfc8919 defines by @pguibert6WIND in #17917 Revert "bgpd: Handle Addpath capability using dynamic capabilities" by @ton31337 in #17926 Bgp suppressed attribute by @pguibert6WIND in #17919 Advertised routes incorrect json by @pguibert6WIND in #17905 bgpd,lib,zebra: permit table-direct on VRFs by @rzalamena in #17736 bgpd: Check if the peer really exists before sending dynamic capability by @ton31337 in #17863 bgpd: last reset SNAFU by @ton31337 in #17881 bgpd: Optimize evaluate paths for a peer going down by @donaldsharp in #17924 Isis srv6 topo1 ping by @pguibert6WIND in #17848 ospfd: Prune duplicate next-hop when installing into zebra route table. by @aceelindem in #17906 bgpd: fix table-map option by @askorichenko in #17802 static: fix botched staticd YANG conversion for dst-src by @eqvinox in #17941 tools: Fix frr-reload for ebgp-multihop TTL reconfiguration. by @bobuhiro11 in #17946 zebra: include resolving nexthops in nhg hash by @mjstapp in #17935 pimd: Close AutoRP socket when not needed by @nabahr in #17934 isisd: fix erroneous srv6 information in database by @pguibert6WIND in #17956 bgpd: With suppress-fib-pending ensure withdrawal is sent by @donaldsharp in #17971 bgpd: add config default for "route-reflector allow-outbound-policy" by @enkechen-panw in #17972 Fix SRv6 SID Manager by @cscarpitta in #17964 bgpd: Do not ignore auto generated VRF instances when deleting by @ton31337 in #17947 staticd: Fix NULL pointer dereference when receiving ZAPI_SRV6_SID_RELEASED notification by @cscarpitta in #17979 bgpd: Release SID on router deletion by @Sokolmish in #17913 libs: return from change_caps if no caps by @mjstapp in #17970 staticd: Fix wrong xpath in no sid X:X::X:X/M by @cscarpitta in #17989 bgpd: add config default for "bgp bestpath aigp" by @enkechen-panw in #17990 implement SBFD by @forrestchu in #17336 lib: fix use after free in clear event cpu by @eqvinox in #17943 zebra: fix evpn svd hash avoid double free by @chiragshah6 in #17991 bgpd: fix route-distinguisher in vrf leak json cmd by @chiragshah6 in #17992 zebra: Ensure dplane does not send work back to master at wrong time by @donaldsharp in #17969 bgpd: Do not start BGP session if BGP identifier is not set (backport #17959) by @mergify in #18006 bgpd: Fix up memory leak in processing eoiu marker (backport #18000) by @mergify in #18019 pimd: fix memory leak and assign allocation type (backport #18038) by @mergify in #18043 Coverity 2024 new hotness (backport #17865) by @mergify in #18042 pimd: Fix for FHR mroute taking longer to age out (backport #14105) by @mergify in #18053 bgpd: fix bgp vrf instance creation from implicit (backport #18081) by @mergify in #18099 bgpd: Request SRv6 locator after zebra connection (backport #18069) by @mergify in #18115 nhrpd: fix dont consider incomplete L2 entry (backport #18078) by @mergify in #18112 lib: crash handlers must be allowed on threads (backport #18060) by @mergify in #18101 lib: actually hash all 16 bytes of IPv6 addresses, not just 4 (backport #17901) by @mergify in #18083 pimd: fix DR election race on startup (backport #18048) by @mergify in #18056 bgpd: fix incorrect JSON in bgp_show_table_rd (backport #18120) by @mergify in #18133 Cid 1636504 (backport) by @ton31337 in #18132 Bfd fixups (backport #18026) by @mergify in #18129 bgpd: release manual vpn label on instance deletion (backport #18121) by @mergify in #18154 staticd: Fix SRv6 SID installation and deletion (backport #18064) by @mergify in #18151 lib: fix false context information for SRv6 route (backport #18023) by @mergify in #18146 bgpd: fix vty output of evpn route-target AS4 (backport #18109) by @mergify in #18183 isisd: Request SRv6 locator after zebra connection (backport #18178) by @mergify in #18179 bgpd: When removing the prefix list drop the pointer (backport #18160) by @mergify in #18166 bgpd: Fix crash in bgp_labelpool (backport #18079) by @mergify in #18143 lib: nb: call child destroy CBs when YANG container is deleted (backport #18082) by @mergify in #18191 bgpd: fix default instance when leaving the hidden state (backport 10.3) by @louis-6wind in #18162 pimd: Fix for data packet loss when FHR is LHR and RP (backport #14227) by @mergify in #18203 pimd: Fix PIM VRF support (send register/register stop in VRF) (backport #18216) by @mergify in #18248 pim: Fix vrf binding of autorp and mroute socket (backport #18226) by @mergify in #18246 pim: Fix autorp group joins (backport #18225) by @mergify in #18244 Fix oper-state queries that involve choice/case nodes (backport #18231) by @mergify in #18232 bgpd: remove dmed check not required in bestpath selection (backport #18210) by @mergify in #18227 Revert "bgpd: fix default instance when leaving the hidden state (backport 10.3)" #18162 by @Jafaral in #18255 pimd: During prefix-list update, behave as PIM_UPSTREAM_NOTJOINED sta… (backport #17666) by @mergify in #18207 bgpd: fix default instance when leaving the hidden state. (backport #18119) by @louis-6wind in #18272 mgmtd: Prevent use after free (backport #18264) by @mergify in #18279 staticd: Add no form for static-sids command (backport #18263) by @mergify in #18284 ospf6d: Fix use after free of router in OSPFv3 ABR route calculation. (backport #18254) by @mergify in #18265 staticd: Fix no srv6 command (backport #18289) by @mergify in #18292 isisd: Correct edge insertion into TED (backport #18294) by @mergify in #18296 tools: Fix frr-reload.py error related to static-sids (backport #18290) by @mergify in #18291 Bring in 2 northbound bug-fixes from master to 10.3 by @choppsv1 in #18302 pimd: Fix PIM6 MLD VRF support (use recvmsg() pktinfo) (backport #18315) by @mergify in #18332 zebra: Bring up 514 BGP neighbor sessions (backport #18214) by @mergify in #18331 Documentation typesafe (backport #18338) by @mergify in #18352 Topotest startup order (backport #18348) by @mergify in #18353 10.2.3 Bug Fixes babeld Check valid babel port Fix incorrect type assignment in parse_request_subtlv bgpd Do not call evpn_overlay_free no matter what Fix set evpn gateway-ip ipv[46] route-map Fix holdtime not working properly when busy Fixed crash upon bgp network import-check command In bgp_update() for mac addrs ensure we are dealing with evpn Prevent crash when issuing a show rpki connections Retain the routes if we do a clear with n-bit set for graceful-restart Treat the peer as not active due to bfd down only if established Fix incorrect bestpath reasoning in some situations Fix show bgp vpn rd json Fix to show exist/non-exist-map in 'show run' properly Add total path count for bgp net in json output bfdd On shutdown prefix/access list memory was being leaked isisd Fix srv6_sid memory leak lib Create vrf if needed Return duplicate ipv6 prefix-list entry test Return duplicate prefix-list entry test ldpd Free up leaked prefix-list memory on shutdown nhrpd Add hop count validation before forwarding in nhrp_peer_recv() ospf6d Disable and delete ospfv3 areas that no longer have interfaces or configuration. Fix lsa memory leaks related to graceful restart ospfd Prune duplicate next-hops when installing into zebra Fix crash when ospf client connects before doing 'router ospf' pimd Fix for crash during networking restart Fix memory leak on shutdown Initialize gm proxy to false zebra Do not flush an existing vni configuration trying to remove wrong vni Ensure proper return for failure for sid allocation Prevent vrf table 254 being used by non-default vrf Fixes allowing srv6 func-bits length 0 10.2.2 Bug Fixes bgpd Allow bfd to work if peer known but interface address not yet Apply route-map for aggregate before attribute comparison Do not ignore auto generated vrf instances when deleting Do not start bgp session if bgp identifier is not set Do not try to uninstall bfd session if the peer is not established Don't reuse nexthop variable in loop/switch Fix a bug in peer_allowas_in_set() Fix add label support to evpn ad routes Fix bfd with update-source in peer-group Fix bgp label evpn cid 1636504 Fix bgp orf prefix-list json prefix Fix bgp peer solo option Fix bgp vrf instance creation from implicit Fix crash in bgp_labelpool Fix crash in displaying json orf prefix-list Fix deadlock in bgp_keepalive and master pthreads Fix duplicate bgp instance created with unified config Fix for local interface mac cache issue in 'bgp mac hash' table Fix import vrf creates multiple bgp instances Fix incorrect json in bgp_show_table_rd Fix memory leak in bgp_aggregate_install() Fix route-distinguisher in vrf leak json cmd Fix static analyzer issues around bgp pointer Fix table-map option Fix vty output of evpn route-target as4 Fix wrong pthread event cancelling Remove dmed check not required in bestpath selection Request srv6 locator after zebra connection Reset bgp session only if it was a real bfd down event Respect allowas-in value from the source vrf's peer Simplify bgp_evpn_process_rt1 with label Update source address for bfd session Use igpmetric in bgp_aigp_metric_total() When bgp notices a change to shared_network inform bfd of it When removing the prefix list drop the pointer With suppress-fib-pending ensure withdrawal is sent Revert: Handle addpath capability using dynamic capabilities" Revert: Reinstall aggregated routes if using route-maps and it was changed" isisd Add helper function to request srv6 locator information Allow full no form for domain-password and area-password Correct edge insertion into ted Request srv6 locator after zebra connection Show correct level information for show isis interface detail json lib Clean up nexthop hashing mess Crash handlers must be allowed on threads Fix false context information for srv6 route Guard against padding garbage in zapi read Nb: call child destroy cbs when yang container is deleted mgmtd Prevent use after free nhrpd Fix dont consider incomplete l2 entry ospf6d Fix use after free of router in ospfv3 abr route calculation. pbrd Initialize structs used in hash_lookup pimd Always write cand-rp group config even when rp is inactive Close autorp socket when not needed During prefix-list update, behave as pim_upstream_notjoined state (conformance issue) Explicitly ensure the rp src is bsr Fix autorp group joins Fix bsr rps timing out Fix dr election race on startup Fix for data packet loss when fhr is lhr and rp Fix for fhr mroute taking longer to age out Fix memory leak and assign allocation type Fix pim vrf support (send register/register stop in vrf) Fix pim6 mld vrf support (use recvmsg() pktinfo) Fix vrf binding of autorp and mroute socket tests Add a test that shows the v6 recursive nexthop problem Bgp_srv6_sid_reachability should give more time Bgp_srv6l3vpn_to_bgp_vrf3 needs more time Check if allow as-in works when importing between local vrfs tools Add missing formats keyword to segment-routing in frr-reload Add missing rpki keyword to vrf in frr-reload Fix frr-reload for ebgp-multihop ttl reconfiguration. zebra Ensure dplane does not send work back to master at wrong time Evpn svd hash avoid double free Fix leaked nhe Fix resetting valid flags for nhg dependents Guard against junk in nexthop->rmap_src Include resolving nexthops in nhg hash Signed-off-by: Adolf Belka --- config/rootfiles/packages/frr | 1 + lfs/frr | 50 +++++++++++++++++------------------ 2 files changed, 26 insertions(+), 25 deletions(-) diff --git a/config/rootfiles/packages/frr b/config/rootfiles/packages/frr index b5661dff4..039023d3e 100644 --- a/config/rootfiles/packages/frr +++ b/config/rootfiles/packages/frr @@ -204,6 +204,7 @@ usr/sbin/watchfrr usr/sbin/watchfrr.sh usr/sbin/zebra #usr/share/yang/frr-affinity-map.yang +#usr/share/yang/frr-backend.yang #usr/share/yang/frr-bgp-bmp.yang #usr/share/yang/frr-bgp-common-multiprotocol.yang #usr/share/yang/frr-bgp-common-structure.yang diff --git a/lfs/frr b/lfs/frr index 60017d26d..6f60f7cdd 100644 --- a/lfs/frr +++ b/lfs/frr @@ -26,7 +26,7 @@ include Config SUMMARY = FRRouting Routing daemon -VER = 10.2.1 +VER = 10.3.1 THISAPP = frr-frr-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = frr -PAK_VER = 13 +PAK_VER = 14 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8bcc8ccf8febee1012d94a9f3de40cc177bec1af464cd935303df8859a72607d03e5f9030f05bed5d56a7a413a0029479f538b3c0b35acc4a66295b4229f6be1 +$(DL_FILE)_BLAKE2 = aeeaa15bcd102ec322672106e1fdd98f2d124ac79514be6ee1ac63648a336519a95b1f1dc5fbee348b92796e6e79e2a9f857b959af5838b2c2b4afb2dc68de0a install : $(TARGET) @@ -86,28 +86,28 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./bootstrap.sh cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --sysconfdir=/etc/frr \ - --localstatedir=/var/run/frr \ - --enable-user="frr" \ - --enable-group="frr" \ - --enable-vty-group="frrvty" \ - --enable-multipath=64 \ - --disable-doc \ - --disable-babeld \ - --disable-bfdd \ - --disable-eigrpd \ - --disable-irdp \ - --disable-isisd \ - --disable-ldpd \ - --disable-nhrpd \ - --disable-ospf6d \ - --disable-ospfapi \ - --disable-pbrd \ - --disable-pimd \ - --disable-ripd \ - --disable-ripngd \ - --disable-static + --prefix=/usr \ + --sysconfdir=/etc/frr \ + --localstatedir=/var/run/frr \ + --enable-user="frr" \ + --enable-group="frr" \ + --enable-vty-group="frrvty" \ + --enable-multipath=64 \ + --disable-doc \ + --disable-babeld \ + --disable-bfdd \ + --disable-eigrpd \ + --disable-irdp \ + --disable-isisd \ + --disable-ldpd \ + --disable-nhrpd \ + --disable-ospf6d \ + --disable-ospfapi \ + --disable-pbrd \ + --disable-pimd \ + --disable-ripd \ + --disable-ripngd \ + --disable-static cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install -- 2.50.0