-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2018 22:57:38 +0100 Source: quagga Binary: quagga quagga-dbg quagga-doc Architecture: amd64 Version: 0.99.23.1-1+deb8u5 Distribution: jessie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Salvatore Bonaccorso Description: quagga - BGP/OSPF/RIP routing daemon quagga-dbg - BGP/OSPF/RIP routing daemon (debug symbols) quagga-doc - documentation files for quagga Changes: quagga (0.99.23.1-1+deb8u5) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * bgpd/security: Fix double free of unknown attribute (CVE-2018-5379) Security issue: Quagga-2018-1114 * bgpd/security: debug print of received NOTIFY data can over-read msg array (CVE-2018-5380) Security issue: Quagga-2018-1550 * bgpd/security: fix infinite loop on certain invalid OPEN messages (CVE-2018-5381) Security issue: Quagga-2018-1975 Checksums-Sha1: c409cc6f7160a7f573a58af3181ed4a73887e3b7 1214846 quagga_0.99.23.1-1+deb8u5_amd64.deb 4cb88c0b4671580ba4a41d58e6928f773579dc08 1770030 quagga-dbg_0.99.23.1-1+deb8u5_amd64.deb Checksums-Sha256: f64ad6b7db32f3840007a7718444618c676cb375ffa3ab0812522748cf43081e 1214846 quagga_0.99.23.1-1+deb8u5_amd64.deb 06247d49a4edd0e08f0d6b59b99914ff8dbecc5066ae17f9c8abaef6027e9dea 1770030 quagga-dbg_0.99.23.1-1+deb8u5_amd64.deb Files: a28c453b91d4019379a4601e066b1368 1214846 net optional quagga_0.99.23.1-1+deb8u5_amd64.deb c918c5e333812181d1891ab1711a25bc 1770030 debug extra quagga-dbg_0.99.23.1-1+deb8u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtf5havBwTlKSn3+I6LhVPZo19nYFAlqEVxMACgkQ6LhVPZo1 9nbY+A//cbpDisWZLeMARl/o5LwL3l+CCdzRQ39KR34d37YiXk4dMzbMI8jRwhp7 omTNc1N19MkPvbTvvutrqY04GuRi5Q8IDOnvy7H3AozSueSg4ITWyhqWKPZA43g6 y12RUSAlFWEYOIP7V/76HBrkPXtLC6epSeWqxwYrTjfbc7x6eOAPEumVWKLCmAFT kCnzHdR0xZUco7sXcGCp4r0PudMtwJIHyqw4mmjxkdIm2H4jV2jn4ZW7OA6cphTd svJ9oASJlCP+1QLR9R6EAVlxeSImJbbESYBS/7NrsuaqwSq/BGLYy+/u6iEdnKag RIIDdDpG2n91g+bOdSpgzJCFTJ0NFeOPnrebsI5SipE8Dbqs4rA63fx/exh7kINW Wto4q15PEmSIinaCJu2y76cEfvDVLrIjqkoMXlB4BIz+XAq7yZdtEdYMEeq5ZvVv +EiZomGI2lwZKVQdVeGrTqMi1qttzCLvP8BRK1wJJl2CTsh5sgNa173rJg6Pkg3T leOpphqY/HBgu3te9MIH0Db/JVAisbkUl1tjKwb4PrSqd1BAwUNHjU/11nrzT5rJ NbNfH41RA+w6o7bYurRxNJqiO++p9u1Vxml4Hg/Q/VlqKOxVuOmEzGMTCZVn5Exm v1gx3XoO/BG/EqyHwaF2eky6mfZ+jhsFpJblG/k1VHqeyBKC8J0= =F7GX -----END PGP SIGNATURE-----