-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2018 22:57:38 +0100 Source: quagga Binary: quagga quagga-dbg quagga-doc Architecture: arm64 Version: 0.99.23.1-1+deb8u5 Distribution: jessie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Salvatore Bonaccorso Description: quagga - BGP/OSPF/RIP routing daemon quagga-dbg - BGP/OSPF/RIP routing daemon (debug symbols) quagga-doc - documentation files for quagga Changes: quagga (0.99.23.1-1+deb8u5) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * bgpd/security: Fix double free of unknown attribute (CVE-2018-5379) Security issue: Quagga-2018-1114 * bgpd/security: debug print of received NOTIFY data can over-read msg array (CVE-2018-5380) Security issue: Quagga-2018-1550 * bgpd/security: fix infinite loop on certain invalid OPEN messages (CVE-2018-5381) Security issue: Quagga-2018-1975 Checksums-Sha1: 5a4e76ad3bc9192bb19b324ce8664d66c3d33e06 1036736 quagga_0.99.23.1-1+deb8u5_arm64.deb e0163e9fbdbcc212dbbf5d0d053458d2ddaddbc2 1881846 quagga-dbg_0.99.23.1-1+deb8u5_arm64.deb Checksums-Sha256: cbfb037cc167629d5ae341b254f7f0c4982a06405e61d91f351bfdeab59a4eb0 1036736 quagga_0.99.23.1-1+deb8u5_arm64.deb 4efb30d4aae0494a6fc58d82bfb35fc68b3601377244607a48f503852075b429 1881846 quagga-dbg_0.99.23.1-1+deb8u5_arm64.deb Files: 846a0a5e807c3108a54572fff90ac553 1036736 net optional quagga_0.99.23.1-1+deb8u5_arm64.deb 1d80cfed26ef73c4ed1b6877563919cc 1881846 debug extra quagga-dbg_0.99.23.1-1+deb8u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEE/AZ+D7Fzp8KQK1f2vgXS0+5M9EFAlqEV3wACgkQ2vgXS0+5 M9ECbA/+P86IoTiUpNU4TEDO/fkw0j3gS9zBUgX7DyrpMD4tGPJIgvpSgCtlHvi2 KFH1RNBidw9d4hFgTDBmOzsszN78JDhQaPuRnDoZ1nsuTD1WY3znmQCctcgJA94O 0YCWeCUxkPAdRi7FqIp+BnbzJbS4XmTwuXAfjYrbfjXohneLbQzx1EPRzkZhL5ic RLw4aICav47i7ftNzPp9a2x9b5mFxthNUHh68Gy7Xc7Gr3343c5holbI+OjMYD/B VNco3vCfeHYjNS+4l5vEwvWA4xPMsGUvr02x2+FImCfZw5SU7dKY+b/rc2uxpyLW RGKg3fuGd/y+cy7hg/bCExZb8066QCQNvdGR1A/47/MUIWMZ7tDLwDzsi+RSRBbv kwpElUzzJDxs3xdv23lEeKEUzG6N/VZ7a5THFz4YVo1ruK3B2kJrQomPmBZf9EnU EbjXRLrEYqgxwbAvwGRQn7oo5DXRGGEH21cVqn0xpO6+IPBYRErMycdlG1pkr1/j UWlFGBsxoVswUKE51T3g5gto3xHQ8lBWB9PnlNOZpYbObXh4sMte3HM4mXOH8kiW 2gMmqOtRrBpXyJxv3HFTeKnfT3Mev9JOkufkfGErQ1UHp2gCyPWLHlrtjNVkkM8Z uGta9Jo05YG/Owhm7Y1COfR1cRJENZ1w0okLgnP5iybYdKs5qM0= =WUvx -----END PGP SIGNATURE-----