gpp_maybe Security update for frr

SUSE-SLE-Module-Server-Applications-15-SP7-2026-2454

This update for frr fixes the following issues Update to frr 8.5.7: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-one error in FlowSpec operator array bounds check (bsc#1263863). - CVE-2026-37458: Validate MP_REACH_NLRI attribute against incorrect next-hop (bsc#1263974). DoS via a crafted UPDATE message (bsc#1263974).

• Release Date
  Jun 18 2026
• References
  Bugzilla: 1261013, 1263859, 1263863, 1263974
  CVEs: CVE-2026-5107, CVE-2026-28532, CVE-2026-37457, CVE-2026-37458
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 s390x

• Packages
  frr
  The FRRouting Protocol Suite

  8.5.7-150500.4.43.1 lock src

  libmlag_pb0
  FRRouting utility library

  8.5.7-150500.4.43.1 lock rpm

Server Applications Module 15.7 aarch64

• Packages
  frr
  The FRRouting Protocol Suite

  8.5.7-150500.4.43.1 lock src

  libmlag_pb0
  FRRouting utility library

  8.5.7-150500.4.43.1 lock rpm

Server Applications Module 15.7 ppc64le

• Packages
  frr
  The FRRouting Protocol Suite

  8.5.7-150500.4.43.1 lock src

  libmlag_pb0
  FRRouting utility library

  8.5.7-150500.4.43.1 lock rpm

Server Applications Module 15.7 x86_64

• Packages
  frr
  The FRRouting Protocol Suite

  8.5.7-150500.4.43.1 lock src

  libmlag_pb0
  FRRouting utility library

  8.5.7-150500.4.43.1 lock rpm