Ubuntu
quagga package

lp:ubuntu/hoary-security/quagga

Created by James Westby on 2009-06-27 and last modified on 2009-06-27

Members of Ubuntu branches can upload to this branch. Log in for directions.

No branches dependent on this one.

3. By Martin Pitt on 2006-05-15: * SECURITY UPDATE: Remote route injection, authentication bypass, remote
  DoS.
* ripd/ripd.c, ripd/rip_interface.c:
  - When RIPv2 authentication is required, disable RIPv1 or require
    authentication as well (remote attackers could get routing information
    by sending RIPv1 requests). [CVE-2006-2223]
  - Enforce RIPv2 authentication requirements (remote attackers could
    modify routing state via RIPv1 RESPONSE packets). [CVE-2006-2224]
  - Patch ported from CVS head, see
    http://bugzilla.quagga.net/show_bug.cgi?id=262
* bgpd/bgp_community.c:
  - Fix infinite loop with special invalid 'sh ip bgp' command.
    [CVE-2006-2276]
  - Patch ported from 0.99.4.
2. By Michael Vogt on 2005-03-08: "Changed permission setting in postinst script (thanks to Bastian Blank).
Closes: #292690" ported from debian/unstable (closes: #5971)
1. By Michael Vogt on 2005-03-08: Import upstream version 0.97.3

This branch contains Public information

Everyone can see this information.