quagga-0.99.15-5.AXS4.2

エラータID: AXSA:2011-136:01

リリース日: 
2011/04/06 Wednesday - 13:27
題名: 
quagga-0.99.15-5.AXS4.2
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet.
Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng.
Quagga is intended to be used as a Route Server and a Route Reflector. It is not a toolkit, it provides full routing power under a new architecture. Quagga by design has a process for each protocol.
Quagga is a fork of GNU Zebra.
Security issues fixed with this release:
CVE-2010-1674
The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
CVE-2010-1675
bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.

解決策: 

Update packages.

追加情報: 

N/A

ダウンロード: 

SRPMS
  1. quagga-0.99.15-5.AXS4.2.src.rpm
    MD5: 6d707f6f278cf9dcfdf80a26f184a075
    SHA-256: b56e9681f6a580824945ab12e06ee7a5dcdf06d96767cf320559e8ff9be306c8
    Size: 2.12 MB

Asianux Server 4 for x86
  1. quagga-0.99.15-5.AXS4.2.i686.rpm
    MD5: f16835f5830e211490d4fde5e63fa4a3
    SHA-256: bc7c22d8c7ce04a2a99ac81c6a9e5ee36976a94186e292845b8e152e7f253bc9
    Size: 1.03 MB

Asianux Server 4 for x86_64
  1. quagga-0.99.15-5.AXS4.2.x86_64.rpm
    MD5: 1b8aacec72dcd2a1f8822b315f5eead4
    SHA-256: c0be8779567ece25918d6f25066d182ee3641572a14e21f885e13f1ef5b45d23
    Size: 1.06 MB