Branches for Hoary

Author: Michael Vogt
Revision Date: 2005-03-08 10:05:13 UTC

"Changed permission setting in postinst script (thanks to Bastian Blank).
Closes: #292690" ported from debian/unstable (closes: #5971)

Author: Martin Pitt
Revision Date: 2006-05-15 13:49:17 UTC

* SECURITY UPDATE: Remote route injection, authentication bypass, remote
  DoS.
* ripd/ripd.c, ripd/rip_interface.c:
  - When RIPv2 authentication is required, disable RIPv1 or require
    authentication as well (remote attackers could get routing information
    by sending RIPv1 requests). [CVE-2006-2223]
  - Enforce RIPv2 authentication requirements (remote attackers could
    modify routing state via RIPv1 RESPONSE packets). [CVE-2006-2224]
  - Patch ported from CVS head, see
    http://bugzilla.quagga.net/show_bug.cgi?id=262
* bgpd/bgp_community.c:
  - Fix infinite loop with special invalid 'sh ip bgp' command.
    [CVE-2006-2276]
  - Patch ported from 0.99.4.