-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-3922 2011-03-23 22:07:53 --------------------------------------------------------------------------------
Name : quagga Product : Fedora 14 Version : 0.99.18 Release : 1.fc14 URL : http://www.quagga.net Summary : Routing daemon Description : Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Route Reflector. It is not a toolkit, it provides full routing power under a new architecture. Quagga by design has a process for each protocol. Quagga is a fork of GNU Zebra. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 23 2011 Jiri Skala <[email protected]> - 0.99.18-1 - fixes #689852 - CVE-2010-1674 CVE-2010-1675 quagga various flaws - fixes #689763 - updated to latest upstream version 0.99.18 -------------------------------------------------------------------------------- References: [ 1 ] Bug #654603 - CVE-2010-1674 quagga: DoS (crash) by processing malformed extended community attribute in a route https://bugzilla.redhat.com/show_bug.cgi?id=654603 [ 2 ] Bug #654614 - CVE-2010-1675 quagga: BGP session reset by processing BGP Update message with malformed AS-path attributes https://bugzilla.redhat.com/show_bug.cgi?id=654614 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update quagga' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
