Format: 1.8 Date: Mon, 30 Oct 2017 10:29:58 -0400 Source: quagga Binary: quagga quagga-dbg quagga-doc Architecture: powerpc powerpc_translations Version: 0.99.22.4-3ubuntu1.4 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: quagga - BGP/OSPF/RIP routing daemon quagga-dbg - BGP/OSPF/RIP routing daemon (debug symbols) quagga-doc - documentation files for quagga Changes: quagga (0.99.22.4-3ubuntu1.4) trusty-security; urgency=medium . * SECURITY UPDATE: DoS via telnet CLI - debian/patches/CVE-2017-5495-1.patch: limit size of vty buffer to 4096 bytes in lib/command.c, lib/vty.c, lib/vty.h, vtysh/vtysh.c. - debian/patches/CVE-2017-5495-2.patch: ensure vty buf is nul terminated and wrap puts to it with checks in lib/vty.c. - CVE-2017-5495 * SECURITY UPDATE: DoS via BGP UPDATE messages - debian/patches/CVE-2017-16227.patch: fix AS_PATH size calculation for long paths in bgpd/bgp_aspath.c. - CVE-2017-16227 Checksums-Sha1: ddcd178405e04a9845d7d2535aa8deed61aa5688 991456 quagga_0.99.22.4-3ubuntu1.4_powerpc.deb 3e28722b5268c50f6c3f30b7499b4166ce813cb5 1754544 quagga-dbg_0.99.22.4-3ubuntu1.4_powerpc.deb fd46a7472faea47ab0f2333b799d8a42c1e58617 1120 quagga-dbgsym_0.99.22.4-3ubuntu1.4_powerpc.ddeb 5e4cfd5ded3ad414aa6d2d476dffb351e28560aa 4481 quagga_0.99.22.4-3ubuntu1.4_powerpc_translations.tar.gz Checksums-Sha256: 5becacdeeb0cba97fd2455b31f1410746f539db5b0bdef7389e3e5ae95d68093 991456 quagga_0.99.22.4-3ubuntu1.4_powerpc.deb 0d2f9c24cf0d87e9c21f3c5973c65e720909da5789eb162515002b7e020f2979 1754544 quagga-dbg_0.99.22.4-3ubuntu1.4_powerpc.deb 23790a62a67a2b4ea069725869971c8fcabe3bc8869d91555163a6849333ac80 1120 quagga-dbgsym_0.99.22.4-3ubuntu1.4_powerpc.ddeb 3fe4efd62a5f963934f1906de1635698b90bdfbc55e9460e04643e1b3fa10b2c 4481 quagga_0.99.22.4-3ubuntu1.4_powerpc_translations.tar.gz Files: 2483dae75e32137c30af17a8cd9837bc 991456 net optional quagga_0.99.22.4-3ubuntu1.4_powerpc.deb c79a8331b04257eab4175afbf7084807 1754544 debug extra quagga-dbg_0.99.22.4-3ubuntu1.4_powerpc.deb e56fc61d710c145207c60edbfcc4ccf1 1120 net extra quagga-dbgsym_0.99.22.4-3ubuntu1.4_powerpc.ddeb b5cb2a96316987d5c2bb8335160162cc 4481 raw-translations - quagga_0.99.22.4-3ubuntu1.4_powerpc_translations.tar.gz Original-Maintainer: Christian Hammers