-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2018 22:57:38 +0100 Source: quagga Binary: quagga quagga-dbg quagga-doc Architecture: i386 Version: 0.99.23.1-1+deb8u5 Distribution: jessie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Salvatore Bonaccorso Description: quagga - BGP/OSPF/RIP routing daemon quagga-dbg - BGP/OSPF/RIP routing daemon (debug symbols) quagga-doc - documentation files for quagga Changes: quagga (0.99.23.1-1+deb8u5) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * bgpd/security: Fix double free of unknown attribute (CVE-2018-5379) Security issue: Quagga-2018-1114 * bgpd/security: debug print of received NOTIFY data can over-read msg array (CVE-2018-5380) Security issue: Quagga-2018-1550 * bgpd/security: fix infinite loop on certain invalid OPEN messages (CVE-2018-5381) Security issue: Quagga-2018-1975 Checksums-Sha1: e4a97ad6352d49357bfd2bdf203f7a5ebe076a97 1267380 quagga_0.99.23.1-1+deb8u5_i386.deb 910817f21b20df40b2a40734bf70ba603832a68c 1387796 quagga-dbg_0.99.23.1-1+deb8u5_i386.deb Checksums-Sha256: ec42ee0b548e9c8839b544836dad7f360b116cd5c99d1ab9d2e1bb6efcdcfe71 1267380 quagga_0.99.23.1-1+deb8u5_i386.deb 5e45d1496e37fe08a1abf045594bb0a67e4d567ded7a45f0f05dcd0ead818d08 1387796 quagga-dbg_0.99.23.1-1+deb8u5_i386.deb Files: 267d51882bd3d1da657de713e04ad7c5 1267380 net optional quagga_0.99.23.1-1+deb8u5_i386.deb 0eeeb13d2de2fb98a8b0b5223a63a0cf 1387796 debug extra quagga-dbg_0.99.23.1-1+deb8u5_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEevHXPYnWIBOaTTctFfcBBC0/C0gFAlqEVp8ACgkQFfcBBC0/ C0js1g/8CLBuuMSTk44QTM5z1q7hScnKYhsVgcVg6h7rbCbebYFlHGdsaMIP/Mpp c/66i19lAgFR1MwcmQbvPesoFueXl/Q3SfCGU7VXxEW0e1nk2UvqRRm3MVikwjby VX19u/5CikB1uT/imJ8/HM/ZhkM6Hh3UpAc/Jy138V5wHplgUBYaAeDww5QZ/TJq CwxDIHPVpeTkeE50aDxOvJxs8jyWt1fUVPlePIh3yBpvkR0QNspIq7IyofG5jTnm oA4gkKJKB1QnTbDpul+Lo2Q3KUA3rASxH8rm3XNCXZr94Ajqqr5EEGaQlbGj6Izx Gnk1SA7nANeePJCwL1t/wE4MNZqqwOKxwmiUhveS0S3v2dIXpqLRsXWc6K5OaAQI 3UmV3DvttF7alVg3LTxaVn3xmkhyU2ycczyRD+n7a26fUMFmcyAYTmRebqhmZfPc oLs3I3oh+WFmjNDtU+kWJBOUd9FGLrqTKdHhs82eo3+yPJvmuXuPi7hhyOyL0Ovv ZfJxhy3t2xBj29mPav855VOiNemp/sE25lmu1acJWhdv8xXqVUMgvmvRqp32r7M4 874BS+QOnfhTl466NUAjrHQow0FPtZw/vorleLDy3xTdK/kI1+3C+SiZjbs6twBZ RDy70ZC6syG13IvxvMfUGMUQ7mHezJzn7M8pETdh9TgAZs/JWbY= =dA6p -----END PGP SIGNATURE-----