Security update for quagga
This update for quagga fixes the following issues:
- CVE-2017-16227: Fixed bgpd DoS via specially crafted BGP UPDATE messages (boo#1065641)
- CVE-2018-5378: Fixed bgpd bounds check issue via attribute length (Quagga-2018-0543,boo#1079798)
- CVE-2018-5379: Fixed bgpd double free when processing UPDATE message (Quagga-2018-1114,boo#1079799)
- CVE-2018-5380: Fixed bgpd code-to-string conversion tables overrun (Quagga-2018-1550,boo#1079800)
- CVE-2018-5381: Fixed bgpd infinite loop on certain invalid OPEN messages (Quagga-2018-1975,boo#1079801)
-
Submitted by
Marius Tomaschewski (mtomaschewski)
Fixed bugs
bnc#1079801
EMU: VUL-0: CVE-2018-5381: quagga: bgpd infinite loop
bnc#1065641
VUL-0: CVE-2017-16227: quagga: denial of service via specially crafted BGP UPDATE messages
bnc#1079800
EMU: VUL-1: CVE-2018-5380: quagga: bgpd code-to-string conversion tables overrun
bnc#1079798
EMU: VUL-0: CVE-2018-5378: quagga: bgpd bounds check issue via attribute length
bnc#1079799
EMU: VUL-0: CVE-2018-5379: quagga: bgpd double free when processing UPDATE message
