quagga (0.99.6-2ubuntu3.2) feisty-security; urgency=low
* SECURITY UPDATE: A bgpd could be crashed if a peer sent a malformed
OPEN message or a malformed COMMUNITY attribute. Only configured peers can
do this.
* debian/patches/92_ubuntu_fix_dos_malformed_community.dpatch: patch to fix
the DoS. Latest unstable debian package is 0.99.9 which fixes this
upstream
* References: (LP: #139569)
CVE-2007-4826
-- Stephan Hermann <[EMAIL PROTECTED]> Fri, 14 Sep 2007 14:31:48 +0200
** Changed in: quagga (Ubuntu)
Status: New => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4826
--
quagga in dapper/edgy/feisty are vulnerable to malformed community string in
bgpd
https://bugs.launchpad.net/bugs/139569
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
