lp:ubuntu/feisty-updates/quagga

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

14. By Stephan Rügamer on 2007-09-14

* SECURITY UPDATE: A bgpd could be crashed if a peer sent a malformed
  OPEN message or a malformed COMMUNITY attribute. Only configured peers can
  do this.
* debian/patches/92_ubuntu_fix_dos_malformed_community.dpatch: patch to fix
  the DoS. Latest unstable debian package is 0.99.9 which fixes this
  upstream
* References: (LP: #139569)
  CVE-2007-4826

13. By Kees Cook on 2007-05-17

* SECURITY UPDATE: configured peers can cause denial of service.
* debian/patches/91_fix_peer_assert.dpatch: upstream fixes via Debian.
* References
  CVE-2007-1995

12. By Matthias Klose on 2007-03-30

* Update TCP-MD5 patch to support Linux 2.6.20. Ubuntu #90114.
* debian/rules: Explicitely use bash.

11. By Matthias Klose on 2007-03-30

* Fix edgy -> feisty upgrade. Ubuntu #45761.
* Set Ubuntu maintainer address.

10. By Michael Vogt on 2006-12-20

* Merge from debian unstable, remaining changes:
  - debian/patches/81_32bit_u64.dpatch: Define __u64 as uint64_t
    before including the netlink headers, since that symbol does not exist
    by default on 32 bit arches. Fixes i386/powerpc FTBFS.
  - debian/patches/83_ifaddr_defs.dpatch:
    zebra/rt_netlink.c: #include <linux/if_addr.h> and define IF[L]A_RTA
    macros, so that the file compiles again with our kernel headers.

9. By Martin Pitt on 2006-11-28

* Merge from debian unstable; remaining Ubuntu changes:
  - debian/patches/81_32bit_u64.dpatch: Define __u64 as uint64_t
    before including the netlink headers, since that symbol does not exist
    by default on 32 bit arches. Fixes i386/powerpc FTBFS.
* Add debian/patches/83_ifaddr_defs.dpatch:
  - zebra/rt_netlink.c: #include <linux/if_addr.h> and define IF[L]A_RTA
    macros, so that the file compiles again with our kernel headers.

8. By Martin Pitt on 2006-10-12

debian/patches/81_32bit_u64.dpatch: lib/zebra.h: Define __u64 as uint64_t
before including the netlink headers, since that symbol does not exist by
default on 32 bit arches. Fixes i386/powerpc FTBFS.

7. By Christian Hammers on 2006-07-15

* Recreate /var/run if not present because /var is e.g. on a tmpfs
  filesystem (thanks to Martin Pitt). Closes: #376142
* Removed nonexistant option from ospfd.8 manpage (thanks to
  David Medberry). Closes: 378274

6. By Martin Pitt on 2006-06-30

* Merge from debian unstable; remaining Ubuntu change:
  - debian/quagga.init.d: Create /var/run/quagga/

5. By Martin Pitt on 2006-05-15

* SECURITY UPDATE: Remote route injection, authentication bypass, remote
  DoS.
* Add debian/patches/81_ripv1_injection.dpatch:
  - When RIPv2 authentication is required, disable RIPv1 or require
    authentication as well (remote attackers could get routing information
    by sending RIPv1 requests). [CVE-2006-2223]
  - Enforce RIPv2 authentication requirements (remote attackers could
    modify routing state via RIPv1 RESPONSE packets). [CVE-2006-2224]
  - Patch taken from CVS head, see
    http://bugzilla.quagga.net/show_bug.cgi?id=262
* Add debian/patches/82_sh_ip_bgp_loop.dpatch:
  - Fix infinite loop with special invalid 'sh ip bgp' command.
    [CVE-2006-2276]
  - Patch ported from 0.99.4.