- What: Security update for FRRouting with a denial of service vulnerability
- Impact: Red Hat Enterprise Linux 9 users affected
Red Hat Product Errata RHSA-2026:49527 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49527 - Security Advisory Overview Updated Packages Synopsis Important: frr security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for frr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460) Bug Fix(es) and Enhancement(s): Zebra is not installing the route in the kernel after flapping one of the physical link on the ocp worker node. [rhel-9.8.z] (JIRA:RHEL-152300) frr triggers SELinux denials when reading root's Python site-packages directory on RHEL-9 (JIRA:RHEL-176258) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2484385 - CVE-2026-37460 frr: FRRouting: Denial of Service via crafted BGP UPDATE message RHEL-176258 - frr triggers SELinux denials when reading root's Python site-packages directory on RHEL-9 CVEs CVE-2026-37460 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 x86_64 frr-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: d08bd97acdb8c64bf9ffee161001257f1e562019bb79949565c6ea96b7ab1be6 frr-debuginfo-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: a31aaade4109652770a6025e559338bf5ef9684e0b87124e35f262ca96db8a5c frr-debugsource-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: faf48583773989b9f385e45e45d0052446655decd82760c133bc97da470b1127 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 x86_64 frr-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: d08bd97acdb8c64bf9ffee161001257f1e562019bb79949565c6ea96b7ab1be6 frr-debuginfo-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: a31aaade4109652770a6025e559338bf5ef9684e0b87124e35f262ca96db8a5c frr-debugsource-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: faf48583773989b9f385e45e45d0052446655decd82760c133bc97da470b1127 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for IBM z Systems 9 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 s390x frr-8.5.3-15.el9_8.1.s390x.rpm SHA-256: 141c5c1f189e6dc89db848b0f9d3a9c64657442ba9bee59a85e01dfbcb9286f4 frr-debuginfo-8.5.3-15.el9_8.1.s390x.rpm SHA-256: f93b89fc7d03b3181c6316a3881fd14604328f8faa3c6cc0e1f8c178aa22c931 frr-debugsource-8.5.3-15.el9_8.1.s390x.rpm SHA-256: 50b8fa1b36c514b7f9d7f6d67257938ae9f8f96d9d08cfed80378c4e09402c57 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 s390x frr-8.5.3-15.el9_8.1.s390x.rpm SHA-256: 141c5c1f189e6dc89db848b0f9d3a9c64657442ba9bee59a85e01dfbcb9286f4 frr-debuginfo-8.5.3-15.el9_8.1.s390x.rpm SHA-256: f93b89fc7d03b3181c6316a3881fd14604328f8faa3c6cc0e1f8c178aa22c931 frr-debugsource-8.5.3-15.el9_8.1.s390x.rpm SHA-256: 50b8fa1b36c514b7f9d7f6d67257938ae9f8f96d9d08cfed80378c4e09402c57 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for Power, little endian 9 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 ppc64le frr-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: cd8acd7cf42619ddb22ed3610c15e6cc4888af9db57c91945b3675e3cca4a4d6 frr-debuginfo-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: 9571887c9dbda3d91aa00d86709b7563bedb3882ce4411c088fb75bb1830a2a7 frr-debugsource-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: 3f78158c1c3c128a099bb5555567f8dd05b72c6c4765c187a17a4bf7866b28b7 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 ppc64le frr-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: cd8acd7cf42619ddb22ed3610c15e6cc4888af9db57c91945b3675e3cca4a4d6 frr-debuginfo-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: 9571887c9dbda3d91aa00d86709b7563bedb3882ce4411c088fb75bb1830a2a7 frr-debugsource-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: 3f78158c1c3c128a099bb5555567f8dd05b72c6c4765c187a17a4bf7866b28b7 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for ARM 64 9 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 aarch64 frr-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: 3cc80236b4f699b51707f745766ad0cf589d2031ff842ccdebc66b1ab92a9cc9 frr-debuginfo-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: bfac27287918d0c3aab91c0bbdf4ae44378f0cc15a56ab6c6f44496c3b516d41 frr-debugsource-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: f2c9fb678a8937b4dae6ecf30d772659775a306c8083fb9a0640c91bfd156c0f frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 aarch64 frr-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: 3cc80236b4f699b51707f745766ad0cf589d2031ff842ccdebc66b1ab92a9cc9 frr-debuginfo-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: bfac27287918d0c3aab91c0bbdf4ae44378f0cc15a56ab6c6f44496c3b516d41 frr-debugsource-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: f2c9fb678a8937b4dae6ecf30d772659775a306c8083fb9a0640c91bfd156c0f frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 ppc64le frr-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: cd8acd7cf42619ddb22ed3610c15e6cc4888af9db57c91945b3675e3cca4a4d6 frr-debuginfo-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: 9571887c9dbda3d91aa00d86709b7563bedb3882ce4411c088fb75bb1830a2a7 frr-debugsource-8.5.3-15.el9_8.1.ppc64le.rpm SHA-256: 3f78158c1c3c128a099bb5555567f8dd05b72c6c4765c187a17a4bf7866b28b7 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 x86_64 frr-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: d08bd97acdb8c64bf9ffee161001257f1e562019bb79949565c6ea96b7ab1be6 frr-debuginfo-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: a31aaade4109652770a6025e559338bf5ef9684e0b87124e35f262ca96db8a5c frr-debugsource-8.5.3-15.el9_8.1.x86_64.rpm SHA-256: faf48583773989b9f385e45e45d0052446655decd82760c133bc97da470b1127 frr-selinux-8.5.3-15.el9_8.1.noarch.rpm SHA-256: f2c04ebdcc79e813bc3c3f731afccf5fd79365faa34929c788d3425bb1cc75e4 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM frr-8.5.3-15.el9_8.1.src.rpm SHA-256: b830ed86cf25e6d721afbde7f87e04ce31c48aa3d7b4466e780d85ca08cdf6c8 aarch64 frr-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: 3cc80236b4f699b51707f745766ad0cf589d2031ff842ccdebc66b1ab92a9cc9 frr-debuginfo-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: bfac27287918d0c3aab91c0bbdf4ae44378f0cc15a56ab6c6f44496c3b516d41 frr-debugsource-8.5.3-15.el9_8.1.aarch64.rpm SHA-256: f2c9fb678a8937b4dae6ecf30d772659775a306c808