Fedora 25: quagga Security Update
Summary
Quagga is free software that operates TCP/IP-based routing protocols. It takes
a multi-server and multi-threaded approach to resolving the current complexity
of the Internet.
Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS (experimental), OSPFv2,
OSPFv3, RIPv1, RIPv2, and RIPng.
Quagga is intended to be used as a Route Server and a Route Reflector. It is
not a toolkit; it provides full routing power under a new architecture.
Quagga by design has a process for each protocol.
Quagga is a fork of GNU Zebra.
Update Information:
Fix for CVE-2017-5495
Change Log
References
[ 1 ] Bug #1416017 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1416017
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade quagga' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html