ELSA-2026-24370

ELSA-2026-24370 - frr10 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-24

Description

[10.4.3-3]
- Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message

[10.4.3-2]
- Resolves: RHEL-174678 - denial of service via crafted FlowSpec component

Related CVEs

CVE-2026-37457

CVE-2026-37459

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	frr10-10.4.3-3.el9_8.src.rpm	80c779d50a694c41974a07e156bc4f31207c30fa8c58acd076e71509ba830f58	-	ol9_aarch64_appstream
	frr10-10.4.3-3.el9_8.aarch64.rpm	e534248e7f0905096500661ef301906e65645b19d25c7a4ef55fb993ba90fa3f	-	ol9_aarch64_appstream
	frr10-selinux-10.4.3-3.el9_8.noarch.rpm	d21b0eb499bc2d3844949f9d68b7a75e0d45775e37d2a677c5cbc9a55e7c7dc3	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	frr10-10.4.3-3.el9_8.src.rpm	80c779d50a694c41974a07e156bc4f31207c30fa8c58acd076e71509ba830f58	-	ol9_x86_64_appstream
	frr10-10.4.3-3.el9_8.x86_64.rpm	4aa00cf86c99f033df3eb97431ced1e0760c1b5b3b54aa590448bfebbb93a92d	-	ol9_x86_64_appstream
	frr10-selinux-10.4.3-3.el9_8.noarch.rpm	d21b0eb499bc2d3844949f9d68b7a75e0d45775e37d2a677c5cbc9a55e7c7dc3	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team