FEDORA-2018-9cd3ff3784 — security update for quagga

stable

quagga-1.2.2-2.fc27

FEDORA-2018-9cd3ff3784 created by olysonek 7 years ago for Fedora 27

Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-9cd3ff3784

This update has been submitted for testing by olysonek.

7 years ago

This update has been pushed to testing.

7 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

This update has been submitted for batched by olysonek.

7 years ago

This update has been submitted for stable by olysonek.

7 years ago

This update has been pushed to stable.

7 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

quagga-1.2.2-2.fc27

BZ#1546004 CVE-2018-5381 quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service [fedora-all]

BZ#1546006 CVE-2018-5380 quagga: bgpd can overrun internal BGP code-to-string conversion tables potentially allowing crash [fedora-all]

BZ#1546008 CVE-2018-5379 quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code [fedora-all]

BZ#1546009 CVE-2018-5378 quagga: bgpd does not properly bounds check the data sent with a NOTIFY allowing leak of sensitive data or crash [fedora-all]

quagga-1.2.2-2.fc27

Automated Test Results

passed