[Bug 625740] Re: Sync quagga 0.99.17-1 (main) from Debian unstable (main)

[Thierry Carrez]

ACK

** Changed in: quagga (Ubuntu)
       Status: New => Confirmed

-- 
Sync quagga 0.99.17-1 (main) from Debian unstable (main)
https://bugs.launchpad.net/bugs/625740
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in “quagga” package in Ubuntu: Confirmed

Bug description:
Please sync quagga 0.99.17-1 (main) from Debian unstable (main)

A look at the upstream changelog
(http://www.quagga.net/download/quagga-0.99.17.changelog.txt)
shows no changes that would need a FFe. A look at the diffstat
of the debdiff shows also no huge changes to the source (except
generated files like configure and .in files).

Changelog entries since current maverick version 0.99.16-1:

quagga (0.99.17-1) unstable; urgency=high

  * SECURITY:
    "This release provides two important bugfixes, which address remote crash
    possibility in bgpd discovered by CROSS team.":
    1. Stack buffer overflow by processing certain Route-Refresh messages
       CVE-2010-2948
    2. DoS (crash) while processing certain BGP update AS path messages
       CVE-2010-2949
    Closes: #594262

 -- Christian Hammers <ch at debian.org>  Wed, 25 Aug 2010 00:52:48 +0200