[ubuntu/xenial-security] quagga 0.99.24.1-2ubuntu1.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Oct 13 12:33:21 UTC 2016


quagga (0.99.24.1-2ubuntu1.1) xenial-security; urgency=medium

  * SECURITY UPDATE: insecure directory permissions
    - debian/quagga.postinst: set proper directory permissions on
      /etc/quagga, /var/log/quagga, /var/run/quagga.
    - CVE-2016-4036
  * SECURITY UPDATE: denial of service via a large BGP packet
    - debian/patches/dump_fix.patch: create multiple MRT records if there
      is too much data for a prefix in bgpd/bgp_dump.c.
    - CVE-2016-4049

Date: 2016-10-12 20:26:20.902057+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/quagga/0.99.24.1-2ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Xenial-changes mailing list