Red Hat Product Errata RHSA-2026:24347 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24347 - Security Advisory Overview Updated Packages Synopsis Important: frr security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for frr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): frr: denial of service via crafted FlowSpec component (CVE-2026-37457) frr: denial of service via crafted BGP UPDATE message (CVE-2026-37459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2464548 - CVE-2026-37457 frr: denial of service via crafted FlowSpec component BZ - 2466513 - CVE-2026-37459 frr: denial of service via crafted BGP UPDATE message RHEL-166035 - Bump FRR to 10.4.3 to fix EVPN problems [rhel-10.2.z] CVEs CVE-2026-37457 CVE-2026-37459 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 x86_64 frr-10.4.4-1.el10_2.x86_64.rpm SHA-256: 232da9e3cb36e0461ba6d3a2be895f43eb6068df08e531fe096b1339361cf6ee frr-debuginfo-10.4.4-1.el10_2.x86_64.rpm SHA-256: c17256d43e289c4d159281e856296b95d45bb7e764406275f2f45fc4f4a8966e frr-debugsource-10.4.4-1.el10_2.x86_64.rpm SHA-256: 5d40288ef8e02477b10361320c6a9a1c1d5ba663c2f81c49d1f4c002f913ed2a frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 x86_64 frr-10.4.4-1.el10_2.x86_64.rpm SHA-256: 232da9e3cb36e0461ba6d3a2be895f43eb6068df08e531fe096b1339361cf6ee frr-debuginfo-10.4.4-1.el10_2.x86_64.rpm SHA-256: c17256d43e289c4d159281e856296b95d45bb7e764406275f2f45fc4f4a8966e frr-debugsource-10.4.4-1.el10_2.x86_64.rpm SHA-256: 5d40288ef8e02477b10361320c6a9a1c1d5ba663c2f81c49d1f4c002f913ed2a frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for IBM z Systems 10 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 s390x frr-10.4.4-1.el10_2.s390x.rpm SHA-256: e4c168706b0d01244ca328dec51b6b4c83c3f4f0697a9fb26cec76f21afcae71 frr-debuginfo-10.4.4-1.el10_2.s390x.rpm SHA-256: c05fc202f6156da30c4462a78c4b8ec8abd8d240b5f8b8deb966bfd4d5aaf106 frr-debugsource-10.4.4-1.el10_2.s390x.rpm SHA-256: 752794d1d62aa3d31ade3f1714dc98ab88169d2b4f7e11d86d14c22512e2e31a frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 s390x frr-10.4.4-1.el10_2.s390x.rpm SHA-256: e4c168706b0d01244ca328dec51b6b4c83c3f4f0697a9fb26cec76f21afcae71 frr-debuginfo-10.4.4-1.el10_2.s390x.rpm SHA-256: c05fc202f6156da30c4462a78c4b8ec8abd8d240b5f8b8deb966bfd4d5aaf106 frr-debugsource-10.4.4-1.el10_2.s390x.rpm SHA-256: 752794d1d62aa3d31ade3f1714dc98ab88169d2b4f7e11d86d14c22512e2e31a frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for Power, little endian 10 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 ppc64le frr-10.4.4-1.el10_2.ppc64le.rpm SHA-256: cfe3d5e1790b5d32fbe67c32930cc75f3899728a906c06384d4cbb448dfae523 frr-debuginfo-10.4.4-1.el10_2.ppc64le.rpm SHA-256: ecc6c8d7e4300edb0c49516dfc7fbfc416919a8e828f6cbc7dc08fd1909f5afc frr-debugsource-10.4.4-1.el10_2.ppc64le.rpm SHA-256: 4b93443a64327ec7438e863e04dacbad126c779be5bbe73c9dff9e4a8e91a998 frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 ppc64le frr-10.4.4-1.el10_2.ppc64le.rpm SHA-256: cfe3d5e1790b5d32fbe67c32930cc75f3899728a906c06384d4cbb448dfae523 frr-debuginfo-10.4.4-1.el10_2.ppc64le.rpm SHA-256: ecc6c8d7e4300edb0c49516dfc7fbfc416919a8e828f6cbc7dc08fd1909f5afc frr-debugsource-10.4.4-1.el10_2.ppc64le.rpm SHA-256: 4b93443a64327ec7438e863e04dacbad126c779be5bbe73c9dff9e4a8e91a998 frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for ARM 64 10 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 aarch64 frr-10.4.4-1.el10_2.aarch64.rpm SHA-256: 569f7902c9cecd52634605aa907bf6425eb954fcfceb3b3fab1a82e671a98a3e frr-debuginfo-10.4.4-1.el10_2.aarch64.rpm SHA-256: 0919c7e30a20fa10101c77c147f490f7f757ffc481e20fe32eab8e13944dea3e frr-debugsource-10.4.4-1.el10_2.aarch64.rpm SHA-256: d6f833a3671aa6b6d589bd29f95b5c104f70356ecc91d9bb2f316a19c2d7c7e8 frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 aarch64 frr-10.4.4-1.el10_2.aarch64.rpm SHA-256: 569f7902c9cecd52634605aa907bf6425eb954fcfceb3b3fab1a82e671a98a3e frr-debuginfo-10.4.4-1.el10_2.aarch64.rpm SHA-256: 0919c7e30a20fa10101c77c147f490f7f757ffc481e20fe32eab8e13944dea3e frr-debugsource-10.4.4-1.el10_2.aarch64.rpm SHA-256: d6f833a3671aa6b6d589bd29f95b5c104f70356ecc91d9bb2f316a19c2d7c7e8 frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 aarch64 frr-10.4.4-1.el10_2.aarch64.rpm SHA-256: 569f7902c9cecd52634605aa907bf6425eb954fcfceb3b3fab1a82e671a98a3e frr-debuginfo-10.4.4-1.el10_2.aarch64.rpm SHA-256: 0919c7e30a20fa10101c77c147f490f7f757ffc481e20fe32eab8e13944dea3e frr-debugsource-10.4.4-1.el10_2.aarch64.rpm SHA-256: d6f833a3671aa6b6d589bd29f95b5c104f70356ecc91d9bb2f316a19c2d7c7e8 frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 s390x frr-10.4.4-1.el10_2.s390x.rpm SHA-256: e4c168706b0d01244ca328dec51b6b4c83c3f4f0697a9fb26cec76f21afcae71 frr-debuginfo-10.4.4-1.el10_2.s390x.rpm SHA-256: c05fc202f6156da30c4462a78c4b8ec8abd8d240b5f8b8deb966bfd4d5aaf106 frr-debugsource-10.4.4-1.el10_2.s390x.rpm SHA-256: 752794d1d62aa3d31ade3f1714dc98ab88169d2b4f7e11d86d14c22512e2e31a frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428ccf57bad47f67cb4e3daa6bcc62042c59 ppc64le frr-10.4.4-1.el10_2.ppc64le.rpm SHA-256: cfe3d5e1790b5d32fbe67c32930cc75f3899728a906c06384d4cbb448dfae523 frr-debuginfo-10.4.4-1.el10_2.ppc64le.rpm SHA-256: ecc6c8d7e4300edb0c49516dfc7fbfc416919a8e828f6cbc7dc08fd1909f5afc frr-debugsource-10.4.4-1.el10_2.ppc64le.rpm SHA-256: 4b93443a64327ec7438e863e04dacbad126c779be5bbe73c9dff9e4a8e91a998 frr-selinux-10.4.4-1.el10_2.noarch.rpm SHA-256: 8589ba258c3b1b5faea55371e3dea4acbd5b9065f7b3f3cdfe5e28cdd6b34102 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM frr-10.4.4-1.el10_2.src.rpm SHA-256: 93b2e164ca985265e8ad0cab5522428cc