Back Linuxsecurity

Fedora 44 grout Denial of Service Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • June 24, 2026

New version of frr and grout. I am keeping libyang to version 3 at the moment due to recommendations from Once changes to build with libyang5 land, I will rebase libyang as well.

* Thu Jun 11 2026 Robin Jarry - 0.16.0-1 - New upstream release 0.15.0 (fedora#2487832)

[ 1 ] Bug #2413655 - frr-10.6.1 is available [ 2 ] Bug #2468134 - CVE-2026-37457 frr: denial of service via crafted FlowSpec component [fedora-all] [ 3 ] Bug #2468135 - CVE-2026-37458 frr: denial of service via crafted UPDATE message [fedora-all] [ 4 ] Bug #2468136 - CVE-2026-37459 frr: denial of service via crafted BGP UPDATE message [fedora-all] [ 5 ] Bug #2487832 - grout-0.16.0 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-28949d21e5' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 44 Denial of Service Vulnerabilities Disclosed Fedora 44 has released advisories for multiple denial of service vulnerabilities affecting the frr and grout packages. The vulnerabilities, identified as CVE-2026-37457, CVE-2026-37458, and CVE-2026-37459, allow attackers to exploit crafted FlowSpec components and UPDATE messages. These issues were published between May 1 and May 4, 2026, and could lead to service disruptions for users of affected systems. The new versions of frr (10.6.1) and grout (0.16.0) have been made available to address these vulnerabilities. Users are advised to upgrade their systems using the 'dnf' update program. The advisories were published on June 24, 2026, indicating the urgency of the situation. 2 sources 58

Extracted Entities

Fedora 44 grout Denial of Service Advisory 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (3)

Platforms (4)