Red Hat Product Errata RHSA-2026:24370 - Security Advisory
Issued:
2026-06-08
Updated:
2026-06-08

RHSA-2026:24370 - Security Advisory

Synopsis

Important: frr10 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for frr10 is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga.

Security Fix(es):

  • frr: denial of service via crafted FlowSpec component (CVE-2026-37457)
  • frr: denial of service via crafted BGP UPDATE message (CVE-2026-37459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2464548 - CVE-2026-37457 frr: denial of service via crafted FlowSpec component
  • BZ - 2466513 - CVE-2026-37459 frr: denial of service via crafted BGP UPDATE message

Red Hat Enterprise Linux for x86_64 9

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
x86_64
frr10-10.4.3-3.el9_8.x86_64.rpm SHA-256: 3a165e4a70fdcf87ecd69d60ad29632d1328e88bb5fc01a5d15646d727df380f
frr10-debuginfo-10.4.3-3.el9_8.x86_64.rpm SHA-256: e1d5e540d824509e61e023147bd9015a22ea4073b4fe3b8aa875336cd19790a8
frr10-debugsource-10.4.3-3.el9_8.x86_64.rpm SHA-256: 03b95f8701a3eab7cbf06da3a0c9ff2076a3051524c81fe65c0b3b76553758e9
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
x86_64
frr10-10.4.3-3.el9_8.x86_64.rpm SHA-256: 3a165e4a70fdcf87ecd69d60ad29632d1328e88bb5fc01a5d15646d727df380f
frr10-debuginfo-10.4.3-3.el9_8.x86_64.rpm SHA-256: e1d5e540d824509e61e023147bd9015a22ea4073b4fe3b8aa875336cd19790a8
frr10-debugsource-10.4.3-3.el9_8.x86_64.rpm SHA-256: 03b95f8701a3eab7cbf06da3a0c9ff2076a3051524c81fe65c0b3b76553758e9
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
s390x
frr10-10.4.3-3.el9_8.s390x.rpm SHA-256: 67389bf440a346abf5a17b60638935080d6634f480a690c15e28d9c077ef6fdd
frr10-debuginfo-10.4.3-3.el9_8.s390x.rpm SHA-256: 8971c4e860362e9ddba40beabc81e48c02060aad175cbbc9a15055144ea7af11
frr10-debugsource-10.4.3-3.el9_8.s390x.rpm SHA-256: c1192daacaa72186e74b4f14f8de38b41eebdba44c2caa59abb4bb2c5850d28b
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
s390x
frr10-10.4.3-3.el9_8.s390x.rpm SHA-256: 67389bf440a346abf5a17b60638935080d6634f480a690c15e28d9c077ef6fdd
frr10-debuginfo-10.4.3-3.el9_8.s390x.rpm SHA-256: 8971c4e860362e9ddba40beabc81e48c02060aad175cbbc9a15055144ea7af11
frr10-debugsource-10.4.3-3.el9_8.s390x.rpm SHA-256: c1192daacaa72186e74b4f14f8de38b41eebdba44c2caa59abb4bb2c5850d28b
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for Power, little endian 9

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
ppc64le
frr10-10.4.3-3.el9_8.ppc64le.rpm SHA-256: d5627161d12491300f3106197becbc2d46c82baff0038ed1ade4e5f365f74e0f
frr10-debuginfo-10.4.3-3.el9_8.ppc64le.rpm SHA-256: c13061a18fcba8ad26450c3de98398930bf954875e2082db09ea93a4dcfc1462
frr10-debugsource-10.4.3-3.el9_8.ppc64le.rpm SHA-256: f42de4f728aa3a83cf2aa7b8fb48fbb037837f54991a72ee84f96cd213c509e3
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
ppc64le
frr10-10.4.3-3.el9_8.ppc64le.rpm SHA-256: d5627161d12491300f3106197becbc2d46c82baff0038ed1ade4e5f365f74e0f
frr10-debuginfo-10.4.3-3.el9_8.ppc64le.rpm SHA-256: c13061a18fcba8ad26450c3de98398930bf954875e2082db09ea93a4dcfc1462
frr10-debugsource-10.4.3-3.el9_8.ppc64le.rpm SHA-256: f42de4f728aa3a83cf2aa7b8fb48fbb037837f54991a72ee84f96cd213c509e3
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for ARM 64 9

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
aarch64
frr10-10.4.3-3.el9_8.aarch64.rpm SHA-256: a801923608b411f65f9bb411812cf0190776318238c54f77c35e363a28224beb
frr10-debuginfo-10.4.3-3.el9_8.aarch64.rpm SHA-256: 44786355c90947dcb9f9da72d838a20ec67ccd2e7e9be3070b2a7ac900e240fe
frr10-debugsource-10.4.3-3.el9_8.aarch64.rpm SHA-256: 51c0b19a785bbf91e0aec9e2fe16899cc91e191ca37ec38b9e01e4bf885d0173
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
aarch64
frr10-10.4.3-3.el9_8.aarch64.rpm SHA-256: a801923608b411f65f9bb411812cf0190776318238c54f77c35e363a28224beb
frr10-debuginfo-10.4.3-3.el9_8.aarch64.rpm SHA-256: 44786355c90947dcb9f9da72d838a20ec67ccd2e7e9be3070b2a7ac900e240fe
frr10-debugsource-10.4.3-3.el9_8.aarch64.rpm SHA-256: 51c0b19a785bbf91e0aec9e2fe16899cc91e191ca37ec38b9e01e4bf885d0173
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
ppc64le
frr10-10.4.3-3.el9_8.ppc64le.rpm SHA-256: d5627161d12491300f3106197becbc2d46c82baff0038ed1ade4e5f365f74e0f
frr10-debuginfo-10.4.3-3.el9_8.ppc64le.rpm SHA-256: c13061a18fcba8ad26450c3de98398930bf954875e2082db09ea93a4dcfc1462
frr10-debugsource-10.4.3-3.el9_8.ppc64le.rpm SHA-256: f42de4f728aa3a83cf2aa7b8fb48fbb037837f54991a72ee84f96cd213c509e3
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
x86_64
frr10-10.4.3-3.el9_8.x86_64.rpm SHA-256: 3a165e4a70fdcf87ecd69d60ad29632d1328e88bb5fc01a5d15646d727df380f
frr10-debuginfo-10.4.3-3.el9_8.x86_64.rpm SHA-256: e1d5e540d824509e61e023147bd9015a22ea4073b4fe3b8aa875336cd19790a8
frr10-debugsource-10.4.3-3.el9_8.x86_64.rpm SHA-256: 03b95f8701a3eab7cbf06da3a0c9ff2076a3051524c81fe65c0b3b76553758e9
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
aarch64
frr10-10.4.3-3.el9_8.aarch64.rpm SHA-256: a801923608b411f65f9bb411812cf0190776318238c54f77c35e363a28224beb
frr10-debuginfo-10.4.3-3.el9_8.aarch64.rpm SHA-256: 44786355c90947dcb9f9da72d838a20ec67ccd2e7e9be3070b2a7ac900e240fe
frr10-debugsource-10.4.3-3.el9_8.aarch64.rpm SHA-256: 51c0b19a785bbf91e0aec9e2fe16899cc91e191ca37ec38b9e01e4bf885d0173
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
s390x
frr10-10.4.3-3.el9_8.s390x.rpm SHA-256: 67389bf440a346abf5a17b60638935080d6634f480a690c15e28d9c077ef6fdd
frr10-debuginfo-10.4.3-3.el9_8.s390x.rpm SHA-256: 8971c4e860362e9ddba40beabc81e48c02060aad175cbbc9a15055144ea7af11
frr10-debugsource-10.4.3-3.el9_8.s390x.rpm SHA-256: c1192daacaa72186e74b4f14f8de38b41eebdba44c2caa59abb4bb2c5850d28b
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
x86_64
frr10-10.4.3-3.el9_8.x86_64.rpm SHA-256: 3a165e4a70fdcf87ecd69d60ad29632d1328e88bb5fc01a5d15646d727df380f
frr10-debuginfo-10.4.3-3.el9_8.x86_64.rpm SHA-256: e1d5e540d824509e61e023147bd9015a22ea4073b4fe3b8aa875336cd19790a8
frr10-debugsource-10.4.3-3.el9_8.x86_64.rpm SHA-256: 03b95f8701a3eab7cbf06da3a0c9ff2076a3051524c81fe65c0b3b76553758e9
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
aarch64
frr10-10.4.3-3.el9_8.aarch64.rpm SHA-256: a801923608b411f65f9bb411812cf0190776318238c54f77c35e363a28224beb
frr10-debuginfo-10.4.3-3.el9_8.aarch64.rpm SHA-256: 44786355c90947dcb9f9da72d838a20ec67ccd2e7e9be3070b2a7ac900e240fe
frr10-debugsource-10.4.3-3.el9_8.aarch64.rpm SHA-256: 51c0b19a785bbf91e0aec9e2fe16899cc91e191ca37ec38b9e01e4bf885d0173
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
ppc64le
frr10-10.4.3-3.el9_8.ppc64le.rpm SHA-256: d5627161d12491300f3106197becbc2d46c82baff0038ed1ade4e5f365f74e0f
frr10-debuginfo-10.4.3-3.el9_8.ppc64le.rpm SHA-256: c13061a18fcba8ad26450c3de98398930bf954875e2082db09ea93a4dcfc1462
frr10-debugsource-10.4.3-3.el9_8.ppc64le.rpm SHA-256: f42de4f728aa3a83cf2aa7b8fb48fbb037837f54991a72ee84f96cd213c509e3
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218
s390x
frr10-10.4.3-3.el9_8.s390x.rpm SHA-256: 67389bf440a346abf5a17b60638935080d6634f480a690c15e28d9c077ef6fdd
frr10-debuginfo-10.4.3-3.el9_8.s390x.rpm SHA-256: 8971c4e860362e9ddba40beabc81e48c02060aad175cbbc9a15055144ea7af11
frr10-debugsource-10.4.3-3.el9_8.s390x.rpm SHA-256: c1192daacaa72186e74b4f14f8de38b41eebdba44c2caa59abb4bb2c5850d28b
frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.