Red Hat Product Errata RHSA-2026:49607 - Security Advisory
Issued:
2026-08-03
Updated:
2026-08-03

RHSA-2026:49607 - Security Advisory

Synopsis

Important: frr10 security, bug fix, and enhancement update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for frr10 is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga.

Security Fix(es):

  • frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460)

Bug Fix(es) and Enhancement(s):

  • frr10 triggers SELinux denials when reading root's Python site-packages directory on RHEL-9 (JIRA:RHEL-222338)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2484385 - CVE-2026-37460 frr: FRRouting: Denial of Service via crafted BGP UPDATE message
  • RHEL-222338 - frr10 triggers SELinux denials when reading root's Python site-packages directory on RHEL-9

Red Hat Enterprise Linux for x86_64 9

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
x86_64
frr10-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: c802081a8cd62fb29fb2d0b6523252094a20650e19b28bdb190321409d110ec1
frr10-debuginfo-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 77924b037d91e771590914a7464fad00285a595d070cf79bdf012c65e29b2df9
frr10-debugsource-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 657b8d14ed54128e82e33c349c3dc3298516e6336c5efe49c051a66502a87f6c
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
x86_64
frr10-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: c802081a8cd62fb29fb2d0b6523252094a20650e19b28bdb190321409d110ec1
frr10-debuginfo-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 77924b037d91e771590914a7464fad00285a595d070cf79bdf012c65e29b2df9
frr10-debugsource-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 657b8d14ed54128e82e33c349c3dc3298516e6336c5efe49c051a66502a87f6c
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
s390x
frr10-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0f629cae82a93b2c7d2932b59ded408fdae36ed489779d0899f31f8847671eee
frr10-debuginfo-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0eae6d592231eb05a00df252259b7f84999f0073eca157de0605b18948ecfafb
frr10-debugsource-10.4.3-3.el9_8.2.s390x.rpm SHA-256: b5cc85abb10f1048f45f041ba523ec47e6a569927cd15192e443ce82e97c2a12
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
s390x
frr10-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0f629cae82a93b2c7d2932b59ded408fdae36ed489779d0899f31f8847671eee
frr10-debuginfo-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0eae6d592231eb05a00df252259b7f84999f0073eca157de0605b18948ecfafb
frr10-debugsource-10.4.3-3.el9_8.2.s390x.rpm SHA-256: b5cc85abb10f1048f45f041ba523ec47e6a569927cd15192e443ce82e97c2a12
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for Power, little endian 9

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
ppc64le
frr10-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 7254fd54c003c8eddec6e4d6f0147f7c9c6d2b0d7e344a87dd429065bf5c34e5
frr10-debuginfo-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 83b70e611b8ea6bd81f16c9ac0376cfac3e13a67b8ab30090778ca98e1c7bddf
frr10-debugsource-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: f3071d04238031607f696aab19e5b2a91522833f79b24d82487276cc8586f624
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
ppc64le
frr10-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 7254fd54c003c8eddec6e4d6f0147f7c9c6d2b0d7e344a87dd429065bf5c34e5
frr10-debuginfo-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 83b70e611b8ea6bd81f16c9ac0376cfac3e13a67b8ab30090778ca98e1c7bddf
frr10-debugsource-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: f3071d04238031607f696aab19e5b2a91522833f79b24d82487276cc8586f624
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for ARM 64 9

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
aarch64
frr10-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9d73e6992bb0da0d8eaa7fb55ae6c592fb0387d8b2c09a991b81038661e8a0e4
frr10-debuginfo-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9ea5d03e8f4453eb66cb4a793bc3cd9de38b3bce5665aa03d44d2506003e6570
frr10-debugsource-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 01c2766a1da91c1278ae6be12a3d7e7409f9a68257b15fbeb500bb0789719b02
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
aarch64
frr10-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9d73e6992bb0da0d8eaa7fb55ae6c592fb0387d8b2c09a991b81038661e8a0e4
frr10-debuginfo-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9ea5d03e8f4453eb66cb4a793bc3cd9de38b3bce5665aa03d44d2506003e6570
frr10-debugsource-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 01c2766a1da91c1278ae6be12a3d7e7409f9a68257b15fbeb500bb0789719b02
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
ppc64le
frr10-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 7254fd54c003c8eddec6e4d6f0147f7c9c6d2b0d7e344a87dd429065bf5c34e5
frr10-debuginfo-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 83b70e611b8ea6bd81f16c9ac0376cfac3e13a67b8ab30090778ca98e1c7bddf
frr10-debugsource-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: f3071d04238031607f696aab19e5b2a91522833f79b24d82487276cc8586f624
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
x86_64
frr10-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: c802081a8cd62fb29fb2d0b6523252094a20650e19b28bdb190321409d110ec1
frr10-debuginfo-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 77924b037d91e771590914a7464fad00285a595d070cf79bdf012c65e29b2df9
frr10-debugsource-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 657b8d14ed54128e82e33c349c3dc3298516e6336c5efe49c051a66502a87f6c
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
aarch64
frr10-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9d73e6992bb0da0d8eaa7fb55ae6c592fb0387d8b2c09a991b81038661e8a0e4
frr10-debuginfo-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9ea5d03e8f4453eb66cb4a793bc3cd9de38b3bce5665aa03d44d2506003e6570
frr10-debugsource-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 01c2766a1da91c1278ae6be12a3d7e7409f9a68257b15fbeb500bb0789719b02
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
s390x
frr10-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0f629cae82a93b2c7d2932b59ded408fdae36ed489779d0899f31f8847671eee
frr10-debuginfo-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0eae6d592231eb05a00df252259b7f84999f0073eca157de0605b18948ecfafb
frr10-debugsource-10.4.3-3.el9_8.2.s390x.rpm SHA-256: b5cc85abb10f1048f45f041ba523ec47e6a569927cd15192e443ce82e97c2a12
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
x86_64
frr10-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: c802081a8cd62fb29fb2d0b6523252094a20650e19b28bdb190321409d110ec1
frr10-debuginfo-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 77924b037d91e771590914a7464fad00285a595d070cf79bdf012c65e29b2df9
frr10-debugsource-10.4.3-3.el9_8.2.x86_64.rpm SHA-256: 657b8d14ed54128e82e33c349c3dc3298516e6336c5efe49c051a66502a87f6c
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
aarch64
frr10-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9d73e6992bb0da0d8eaa7fb55ae6c592fb0387d8b2c09a991b81038661e8a0e4
frr10-debuginfo-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 9ea5d03e8f4453eb66cb4a793bc3cd9de38b3bce5665aa03d44d2506003e6570
frr10-debugsource-10.4.3-3.el9_8.2.aarch64.rpm SHA-256: 01c2766a1da91c1278ae6be12a3d7e7409f9a68257b15fbeb500bb0789719b02
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
ppc64le
frr10-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 7254fd54c003c8eddec6e4d6f0147f7c9c6d2b0d7e344a87dd429065bf5c34e5
frr10-debuginfo-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: 83b70e611b8ea6bd81f16c9ac0376cfac3e13a67b8ab30090778ca98e1c7bddf
frr10-debugsource-10.4.3-3.el9_8.2.ppc64le.rpm SHA-256: f3071d04238031607f696aab19e5b2a91522833f79b24d82487276cc8586f624
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
frr10-10.4.3-3.el9_8.2.src.rpm SHA-256: cb1fe85c535bb05eb83a6a103fe2ea46ce75326fff04a5a564156e52a6776d19
s390x
frr10-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0f629cae82a93b2c7d2932b59ded408fdae36ed489779d0899f31f8847671eee
frr10-debuginfo-10.4.3-3.el9_8.2.s390x.rpm SHA-256: 0eae6d592231eb05a00df252259b7f84999f0073eca157de0605b18948ecfafb
frr10-debugsource-10.4.3-3.el9_8.2.s390x.rpm SHA-256: b5cc85abb10f1048f45f041ba523ec47e6a569927cd15192e443ce82e97c2a12
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm SHA-256: b3fd49f7c105bf56cff27564ab14702ad499b4de7c49aba6a9f6af3b159c4ff7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.