Format: 1.8
Date: Fri, 07 Oct 2011 12:38:37 -0400
Source: quagga
Binary: quagga quagga-doc
Architecture: all i386_translations i386
Version: 0.99.15-1ubuntu0.3
Distribution: lucid
Urgency: low
Maintainer: Ubuntu/amd64 Build Daemon <buildd@roseapple.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 quagga     - BGP/OSPF/RIP routing daemon
 quagga-doc - documentation files for quagga
Changes: 
 quagga (0.99.15-1ubuntu0.3) lucid-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary code execution via malformed Inter Area
     Prefix LSA
     - debian/patches/99_CVE-2011-3323.dpatch: check lengths in
       ospf6d/{ospf6_abr.h,ospf6_asbr.h,ospf6_intra.h,ospf6_lsa.h,
       ospf6_message.c,ospf6_message.h,ospf6_proto.h}
     - CVE-2011-3323
   * SECURITY UPDATE: denial of sevice via crafted Link-State-Advertisement
     - debian/patches/99_CVE-2011-3324.dpatch: change assert to warning in
       ospf6d/ospf6_lsa.c.
     - CVE-2011-3324
   * SECURITY UPDATE: denial of service via crafted Hello packet
     - debian/patches/99_CVE-2011-3325.dpatch: add extra checks to
       ospfd/ospf_packet.c.
     - CVE-2011-3325
   * SECURITY UPDATE: denial of service via unknown Link-State-Advertisements
     types
     - debian/patches/99_CVE-2011-3326.dpatch: exit if LSA type is unknown
       in ospfd/ospf_flood.c.
     - CVE-2011-3326
   * SECURITY UPDATE: arbitrary code execution via Extended Communities path
     attribute
     - debian/patches/99_CVE-2011-3327.dpatch: properly check size in
       bgpd/bgp_ecommunity.c.
     - CVE-2011-3327
Checksums-Sha1: 
 c611988f627f6cc552bba2e3986561fcda79f5e6 764502 quagga-doc_0.99.15-1ubuntu0.3_all.deb
 07494291fbfbc8b3cc59d6524a9a49d4b1016757 3775 quagga_0.99.15-1ubuntu0.3_i386_translations.tar.gz
 7b03a5d6ccd2de65630f56c4940a0c82215e26e5 1575824 quagga_0.99.15-1ubuntu0.3_i386.deb
Checksums-Sha256: 
 91b2dc45545bd77ee435bc5f64c9396a91140953b5c12de2d7ee1aafc57a41e6 764502 quagga-doc_0.99.15-1ubuntu0.3_all.deb
 202ea81386301dbeefd2860f15c009184fb500eada535dfdc14dfde6ce0e8fff 3775 quagga_0.99.15-1ubuntu0.3_i386_translations.tar.gz
 d0d616b3166ea503e5e5f52eef322864204bbd463c6faca525053f5cbbb57d43 1575824 quagga_0.99.15-1ubuntu0.3_i386.deb
Files: 
 8ce3814e1e9bc274893771e8c344512f 764502 doc optional quagga-doc_0.99.15-1ubuntu0.3_all.deb
 e4c645471adf414fcb87dd38f3b73b5e 3775 raw-translations - quagga_0.99.15-1ubuntu0.3_i386_translations.tar.gz
 7cde8dc77cd27669b7136239c45a6e43 1575824 net optional quagga_0.99.15-1ubuntu0.3_i386.deb
Original-Maintainer: Christian Hammers <ch@debian.org>