openSUSE Security Update: quagga: fixing multiple vulnerabilities
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2011:1155-1
Rating:             important
References:         #718056 #718058 #718059 #718061 #718062 
Cross-References:   CVE-2011-3323 CVE-2011-3324 CVE-2011-3325
                    CVE-2011-3326 CVE-2011-3327
Affected Products:
                    openSUSE 11.4
                    openSUSE 11.3
______________________________________________________________________________

   An update that fixes 5 vulnerabilities is now available. It
   includes one version update.

Description:

   This update fixes the following security issues:

   - 718056: OSPF6D buffer overflow while decoding Link State
   Update with Inter Area Prefix Lsa (CVE-2011-3323)
   - 718058: OSPF6D DoS while decoding Database Description
   packet (CVE-2011-3324)
   - 718059: OSPFD DoS while decoding Hello packet
   (CVE-2011-3325)
   - 718061: OSPFD DoS while decoding Link State Update
   (CVE-2011-3326)
   - 718062: DoS while decoding EXTENDED_COMMUNITIES in
   Quagga's BGP (CVE-2011-3327)


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4:

      zypper in -t patch quagga-5276

   - openSUSE 11.3:

      zypper in -t patch quagga-5276

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4 (i586 x86_64):

      quagga-0.99.17-4.11.1
      quagga-devel-0.99.17-4.11.1

   - openSUSE 11.3 (i586 x86_64) [New Version: 0.99.17]:

      quagga-0.99.17-1.11.1
      quagga-devel-0.99.17-1.11.1


References:

   https://www.suse.com/security/cve/CVE-2011-3323.html
   https://www.suse.com/security/cve/CVE-2011-3324.html
   https://www.suse.com/security/cve/CVE-2011-3325.html
   https://www.suse.com/security/cve/CVE-2011-3326.html
   https://www.suse.com/security/cve/CVE-2011-3327.html
   https://bugzilla.novell.com/718056
   https://bugzilla.novell.com/718058
   https://bugzilla.novell.com/718059
   https://bugzilla.novell.com/718061
   https://bugzilla.novell.com/718062

openSUSE: 2011:1155-1: important: quagga

October 18, 2011
An update that fixes 5 vulnerabilities is now available

Description

This update fixes the following security issues: - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa (CVE-2011-3323) - 718058: OSPF6D DoS while decoding Database Description packet (CVE-2011-3324) - 718059: OSPFD DoS while decoding Hello packet (CVE-2011-3325) - 718061: OSPFD DoS while decoding Link State Update (CVE-2011-3326) - 718062: DoS while decoding EXTENDED_COMMUNITIES in Quagga's BGP (CVE-2011-3327)

 

Patch

Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch quagga-5276 - openSUSE 11.3: zypper in -t patch quagga-5276 To bring your system up-to-date, use "zypper patch".


Package List

- openSUSE 11.4 (i586 x86_64): quagga-0.99.17-4.11.1 quagga-devel-0.99.17-4.11.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.11.1 quagga-devel-0.99.17-1.11.1


References

https://www.suse.com/security/cve/CVE-2011-3323.html https://www.suse.com/security/cve/CVE-2011-3324.html https://www.suse.com/security/cve/CVE-2011-3325.html https://www.suse.com/security/cve/CVE-2011-3326.html https://www.suse.com/security/cve/CVE-2011-3327.html https://bugzilla.novell.com/718056 https://bugzilla.novell.com/718058 https://bugzilla.novell.com/718059 https://bugzilla.novell.com/718061 https://bugzilla.novell.com/718062


Severity
Announcement ID: openSUSE-SU-2011:1155-1
Rating: important
Affected Products: openSUSE 11.4 openSUSE 11.3 . It includes one version update.

Related News

24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
28.Lock Globe Esm H320
1 - 2 min read
A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been
27.Tablet Connections Blocks Lock Esm H320
2 - 4 min read
Canonical has recently announced the Beta release of Ubuntu Linux 24.04 LTS , codenamed "Noble Numbat." This release aims to continue Ubuntu's
21.Globe RadiatingCode Esm H320
2 - 3 min read
The open-source movement has come a long way, from its origins in the 1960s and 1970s to becoming an integral part of organizations worldwide.
13.Lock StylizedMotherboard Esm H320
2 - 3 min read
The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved