Sync quagga 0.99.17-1 (main) from Debian unstable (main)
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| quagga (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned | ||
Bug Description
Please sync quagga 0.99.17-1 (main) from Debian unstable (main)
A look at the upstream changelog
(http://
shows no changes that would need a FFe. A look at the diffstat
of the debdiff shows also no huge changes to the source (except
generated files like configure and .in files).
Changelog entries since current maverick version 0.99.16-1:
quagga (0.99.17-1) unstable; urgency=high
* SECURITY:
"This release provides two important bugfixes, which address remote crash
possibility in bgpd discovered by CROSS team.":
1. Stack buffer overflow by processing certain Route-Refresh messages
2. DoS (crash) while processing certain BGP update AS path messages
Closes: #594262
-- Christian Hammers <email address hidden> Wed, 25 Aug 2010 00:52:48 +0200
| Changed in quagga (Ubuntu): | |
| importance: | Undecided → Wishlist |
| status: | New → Confirmed |
| status: | Confirmed → New |
| Thierry Carrez (ttx) wrote | #1 |
| Changed in quagga (Ubuntu): | |
| status: | New → Confirmed |
| Colin Watson (cjwatson) wrote | #2 |
| Changed in quagga (Ubuntu): | |
| status: | Confirmed → Fix Released |
ACK